Deploying config files

  • Thread starter Thread starter Mervin Williams
  • Start date Start date
M

Mervin Williams

I have my database connection string, including the password, stored within
my app.config. Do I need to include the config file within my deployment
package? If so, how do I include my config within the deployment package so
that it cannot be viewed by users?

Thanks in advance,

Mervin Williams
 
Yes, the app.config needs to be deployed.

Use the Enterprise Library, and use it to encrypt the sensitive information.
 
And if you want to prevent your users from reading it, you'll need
to encrypt the values in it or put some exclusive access
permissions on it (or preferably both).

/claes
 
Back
Top