Hardy Consulting

Description

[Secure Your Database Connection Strings] One security drawback in DotNetNuke has always been the Data Connection Strings (DCS). The DCS have always been stored as plain text in the web.config file. This means that anyone with access to the web.config file has access to the login credentials for your SQL server. Microsoft has provided encryption and decryption capabilities for the web.config file since .NET 1.0. This support was greatly enhanced in .NET 2.0. Unfortunately, many people did not have the access privileges or the knowledge to implement this feature. This module was designed so that no special individual user privileges on the server are required. (ASP.NET/NETWORK SERVICES must be able to update the web.config file which is normal) Additionally, no special skills or knowledge of the process is required. Features: -Easily Encrypt and Decrypt connection strings

Products & services

Similar companies nearby