Database Password

  • Thread starter Thread starter A.M
  • Start date Start date
A

A.M

Hi,

We have a web server running ASP.NET app in DMZ zone provided by Cisco PIX
firewall.
The web application is sending user id and password to the database server.
What is the best practice to make the connection string secure?

Thanks,
Ali
 
Do not store the actual password. Store a hash instead. Unless you're
talking about the connection password, in that case you should use Windows
authentication so the password would not be sent (and encrypt the
connection).

Jerry
 
Back
Top