CodeVerge.Net Beta


   Explore    Item Entry    Members      Register  Login  
NEWSGROUP
.NET
Algorithms-Data Structures
Asp.Net
C Plus Plus
CSharp
Database
HTML
Javascript
Linq
Other
Regular Expressions
VB.Net
XML

Free Download:




Zone: > NEWSGROUP > Asp.Net Forum > general_asp.net.security Tags:
Item Type: NewsGroup Date Entered: 10/22/2004 8:24:15 AM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
(NR, 0)
XPoints: N/A Replies: 2 Views: 38 Favorited: 0 Favorite
Can Reply:  No Members Can Edit: No Online: Yes
3 Items, 1 Pages 1 |< << Go >> >|
mtait
Asp.Net User
Where to store database passwords10/22/2004 8:24:15 AM

0/0

Hi - http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=22 - advises not to store the 'sa' password for sql in the web.config file:

"Don't embed 'sa' passwords in applications such as VB/Delphi apps, global.asa files, web.config, or batch files."

Does this apply to any passwords accesing the sql database? Where else would be better to store the sql username and passwords if not in the web.config file?

Thanks, Mark
owen912
Asp.Net User
Re: Where to store database passwords10/22/2004 11:31:30 AM

0/0

What I like to do is encrypt the connection string and store the encrypted string in the web.config file. I then store the key to decrypt the string outside the web site?s root directory.
sivilian
Asp.Net User
Re: Where to store database passwords10/22/2004 5:56:32 PM

0/0

There is a new tool that will encrypt the username, password and/or the connection string in the registry. You can then set the registry key inside your web config and it will work just as if you had included it in clear text.

Here is the link aspnet_setreg

The catch is that it only works for the .NET Framework 1.1

hope this helps,
sivilian
My Weblogs
3 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Oracle Database 11g SQL: Master SQL and PL/SQL in the Oracle Database Authors: Jason Price, Pages: 656, Published: 2007
OCA: Oracle Application Server 10g Administration I Study Guide (Exam 1Z0-311) Authors: Robert J. Bryla, Bob Bryla, April Wells, Pages: 510, Published: 2006
Access 2007 All-In-One Desk Reference for Dummies: All-in-one Desk Reference for Dummies Authors: Alan Simpson, Margaret Levine Young, Alison Barrows, April Wells, Jim McCarter, Pages: 768, Published: 2006
Microsoft Office Access 2003: The Complete Reference Authors: Virginia Andersen, Pages: 719, Published: 2003
Mac OS X Power Tools: Your Guide to Becoming a Power User Authors: Dan Frakes, Pages: 656, Published: 2004
PHP & MySQL Web Development All-in-One Desk Reference For Dummies: All-in-one Desk Reference for Dummies. Authors: Janet Valade, Tricia Ballad, Bill Ballad, Pages: 646, Published: 2007
PHP Solutions, Dynamic Web Design Made Easy: Dynamic Web Design Made Easy Authors: David Powers, SpringerLink (Online service, Pages: 0, Published: 2006
Hacking the Code: ASP.NET Web Application Security Authors: Mark Burnett, James C. Foster, Pages: 550, Published: 2004
PHP Cookbook Authors: David Sklar, Adam Trachtenberg, Pages: 784, Published: 2006
Oracle Database 10g SQL: Master SQL and PL/SQL Authors: Jason Price, Pages: 608, Published: 2004

Web:
Never store passwords in a database! Dec 15, 2006 ... (It’s a doubly unfortunate decision because you don’t need to store passwords in your user database in order to offer convenient account ...
Secure Password Database, Encrypted Password Store, Password ... Aug 13, 2004 ... A securely encrypted password database. Very convenient and easy to use but secure password/user name/code/PIN database.
How-to: Store User Passwords in a Database - jonlee.ca There are several ways in which we can store this information in our database. Plain Text Advantages: Users can recover password, no collision ...
Download Secure Password Store 0.91 Free Trial - A secure Password ... A secure Password database inc password generator. Secure Password Store is a secure Password database manager that stores all passwords in a safe database. ...
Tapestry Central: Why store passwords in the database? Feb 6, 2006 ... I mean, I may not be a security expert, but even I know that you don't need to store the actual password in a database to allow users to ...
Re: [PHP] Store database password outside of public_html folder Aug 4, 2008 ... I've been reading on the internet that is most secure to store your database details outside of the public accessible folder.
How can a user store an encrypted password in database? | dev ... While we are inserting the user details we want to store password in encrypted form in database. Please advise. Regards,. Pravin Dabhi ...
How people stores the password in database? I use md5 to store the password in the database (and some other fancy stuff), so it isn't retrievable. When someone logs in, I encrypt the ...
Database Password Policy The scope into which you may store database credentials must be physically ... Database passwords used by programs are system-level passwords as defined by ...
Store password information in a secure database - Password Saver ... Password Saver (Personal) is a powerful solution to store all your password information in a secure, centralized database on your hard drive.

Videos:
Setting up a Database :: CoffeeCup LockBox This video tutorial will walk you through the process of setting up a database in CoffeeCup LockBox. This database contains all the usernames and pas...
Access 2000 (05) Web Security The Access 2000 (05) Web Security is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology cours...
How to log in 1-CLICK to websites Web Replay detects when you enter your user name and password to a web site and asks you to store them securely in an encrypted database on your loca...
Access 2000 Dev Level 15 The Access 2000 Dev Level 15 is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology course tit...
Access 2000 (05) Web Security The Access 2000 (05) Web Security is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology cours...
Access 2000 Dev Level 15 The Access 2000 Dev Level 15 is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology course tit...
MewSeek and PwnPlayer bring P2P Power to your iPhone 3g Bonjour all, Sorry for a rather vague vid. I want to bring you all the latest and greatest apps and capabilities to your iPhone 3g and iPod touch wi...
Access 2000 (05) Web Security The Access 2000 (05) Web Security is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology cours...
Access 2000 Dev Level 15 The Access 2000 Dev Level 15 is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology course tit...
Access 2000 (05) Web Security The Access 2000 (05) Web Security is part of KeyStone Learning Systems library of more than 1,200 CD-ROM and video-based information technology cours...




Search This Site:










automatically replacing sections (i.e. applicationsettings) in the web.config

what are some options for presenting pdf's?

rating system for photos

findcontrol, asp:content, and master pages

it works, but...

new to webparts - having trouble deleting webpart

does anyone know of a module that allows someone to server a different skin depending on browser type?

can't run web form controls...set up or security problem?

web server

benchmark testing

i cant use cookies and compile .vb's

unable to create new web projects on 1.1

understanding - web.sitemap

@albumid is not a parameter for procedure editalbum.

forums module is posted!

about web develor

function inheriting

project - human resource system

how to access data in a datagrid

web application project and web deployment project

where's my fields?

omg please help. parent updatepanel refreshing with nested updatepanel

where is the code-behind for an aspx that uses a master page

uploading files into alternative folders in 2.1.2

installing dnn in a root of host

need a good tutorial on asp.net 2.0 code behind

catch all validation message

tableless design in asp.net possible?

aspmail

radio button list

 
All Times Are GMT