Connection string ....
Now you know how, so let me tell you something interesting.
If someone gets hold of your connectionstring, they can potentially
access your db (cause your connectionstring has the db user name, and
pwd). Remember never to use a literal connection string, it's best to
put it in web config.
If possible use Windows authentication, and you will be safer, cause
you would not have user id and pwd in the connectionstring, and nobody
would be able to gain access to the db using those.
Cheers!
Cyril Gupta