Access Databases and AccessDataSource Control

Re: Dynamicaly DB password in connection string

mudassarkhan — Mon, 06 Jul 2009 03:22:18 GMT

alcaps:

I tryed:
ConfigurationManager.ConnectionStrings["controleConnectionString"].ConnectionString = conStr

But I get a error "Configuration read-only".

Why you want to reset the connection string in web.config

This variable conStr has the connection string in it use this to connect to database

Re: Dynamicaly DB password in connection string

alcaps — Mon, 06 Jul 2009 03:05:15 GMT

Hi,

I have in web.config:
<add name="controleConnectionString" connectionString="Provider=Microsoft.Jet.OLEDB.4.0;Data Source=|DataDirectory|\controle.mdb;Persist Security Info=True;Jet OLEDB:Database Password={0}" providerName="System.Data.OleDb"/>

In code now I have:
string conStr = ConfigurationManager.ConnectionStrings["controleConnectionString"].ConnectionString;
conStr = String.Format(conStr, "password");

This code only create a connection string. How I use this in a dataset?

I tryed:
ConfigurationManager.ConnectionStrings["controleConnectionString"].ConnectionString = conStr

But I get a error "Configuration read-only".

Tks

Re: Dynamicaly DB password in connection string

Mikesdotnetting — Sun, 05 Jul 2009 06:08:06 GMT

alcaps:
I want hide the database password and limit the system access.

You can encrypt the connection string (together with the password) in your web.config file: http://www.google.co.uk/search?hl=en&q=web+config+encrypt+connection+string&btnG=Google+Search&meta=&aq=2&oq=web+config+encr

If you are really concerned about security, you should not be using Access. There are plenty of tools available for cracking open password protected databases. If you believe someone can get access to your code or web.config, then it stands to reason that they can get your database and force it open.

Re: Dynamicaly DB password in connection string

mudassarkhan — Sun, 05 Jul 2009 03:53:23 GMT

You can do something like this Place the placeholders

<add name ="Excel03ConString"

connectionString="Provider=Microsoft.Jet.OLEDB.4.0;Data Source={0};

Extended Properties='Excel 8.0;HDR={1}'"/>

And in front end then do String.Format to fill them

string conStr = ConfigurationManager.ConnectionStrings["Excel03ConString"] .ConnectionString;

conStr = String.Format(conStr, "C:\\Book1.xls", "yes");

Re: Dynamicaly DB password in connection string

alcaps — Sun, 05 Jul 2009 03:40:05 GMT

I want hide the database password and limit the system access.

Authentication at the application level can expose my MDB password.

I want use my dynamically created string in a dataset but it only get from web.config. I want override this web.config string.

Re: Dynamicaly DB password in connection string

Mikesdotnetting — Sat, 04 Jul 2009 12:14:53 GMT

Not sure what you mean by "how can I use this connection string". It's just a string that's created dynamically. Although I am not sure why you are authenticating users at the database connection level. Can't you just use From Authentication at the application level?

Dynamicaly DB password in connection string

alcaps — Sat, 04 Jul 2009 07:05:17 GMT

Hi,

To access my system, the user must enter a password. This pass must be the same of my MS Access DB.

The system must try use the DB with the entered password. If sucessful, show informations. Else, show a message "wrong password".

I'm using Dataset, then I must manipulate the connection string. But how????

Like this:

String ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=|DataDirectory|\\database.mdb;Persist Security Info=True;Jet OLEDB:Database Password=" + passwordTextBox.text

How can I can use this conection string?

Tks,

Patrick Coelho - www.criapix.com.br