
In one of the previous articles we saw that we can use the web.config file to save our connection string. We also talked about the advantages which comes down to easily altering the connection string if it changes in the future. What we did not talked about was encrypting connection string. When we store the connection string in the web.config file it's stored in a readable form. If anyone can open the web.config file he can read the connection string and security will be jeopardize.
|