Contents
Is connection string safe?
Even with the connection string stored in the configuration file in an encrypted format, there is still a risk of an attacker getting the connection string. However, it is much more difficult for the attacker.
Is it safe to store connection string in web config?
Summary. Always store the connection string in a config file. It’s not any harder once you get used to it and you will benefit from it as it is much easier to change connection string properties when your application is in production.
Where should you store connection string information?
Connection strings in configuration files are typically stored inside the element in the app. config for a Windows application, or the web. config file for an ASP.NET application.
Is it safe to store the database password in a PHP file?
There is an additional risk with storing passwords in a .php file within your webroot, which is a bit obscure but can be easily avoided by placing the file outside of your web root.
Where should I store a database connection string?
You could use the visual studio settings / properties that are available when using visual studio. They are pretty simple to use, and if you use a user setting it is saved in the app data directory for the user, so it is semi-hidden away from tinkering.
Is it possible to store code in a database?
You certainly can store the code in database, but running it will be way more difficult. To run code dynamically, you need to compile it, which is quite possible through CodeDOM. It actually works through regular C# compiler, and this compiler is always bundled with all versions of .NET and run by CodeDOM.
Where do I Save my connection.php file?
Consider: if you are editing connection.php using a text editor, and your connection drops while you are editing it, your editor will automatically save a copy of the connection.php file in some backup file: e.g., connection.php~ (in the same directory).