Connection string really needed in XML?

Question

Im programming a VB.net application that automatically created a xml file that conntains a connection string to a SQL server(user & pw).. Is it really neccessary to have that line in the XML?? I erased it and it seems to be working fine..Just want to get rid of it for security purposes.

ok... you deleted your connection string. How is your application connecting to your db now? — Vland, Dec 27 '13 at 01:44

score 0 · Accepted Answer · edited May 23 '17 at 12:03

0

It's useful to put your connection string in some kind of config file (xml or ini or whatever) in case you move your database to another server or you change your login credentials and so on...

if you think you'll never need this and prefer to rebuild and redeploy your application, then no, you don't need any xml configuration file with the connection string in it.

If you're worried about security you could keep it in the xml file encrypted and then decrypt it runtime.

Connection Strings and Configuration Files

Encrypt connection string in app.config

edited May 23 '17 at 12:03

Community

1
1

answered Dec 27 '13 at 01:48

Vland

4,151
2
32
43

Thanks! Im looking into that. – user2824324 Dec 27 '13 at 02:21

Connection string really needed in XML?

1 Answers1