我想要亚音速从变量而不是 app.config 读取数据库密码
我已经在我的桌面应用程序中成功实现了 SUBSONIC DAL。这是很棒的经历。但 subsonic 从 app.config 文件读取数据库密码。由于 app.config 与客户端的应用程序一起部署,因此它是一个很大的安全威胁。
如果我可以从变量而不是 app.config 读取数据库密码,那将会很有帮助。
预先感谢,
问候。
I have successfully implemented SUBSONIC DAL in my desktop application. it was superb experience. but subsonic reads database password from app.config file. as app.config deploy with application on client side, therefore its a big security threat.
It would be helpful if i can read database password from a variable instead of app.config.
Thanks in advance,
Regards.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
保护连接字符串数据的最简单、最好的方法是加密 app.config 的连接字符串部分,
请阅读此处 http://msdn.microsoft.com/en-us/library/system.configuration.rsaprotectedconfigurationprovider.aspx
The easiest and best way to protect connection string data is to encrypt the connection string section of the app.config
Read here http://msdn.microsoft.com/en-us/library/system.configuration.rsaprotectedconfigurationprovider.aspx
Dataservice.setdefaultconnectionstring() 解决我的问题
Dataservice.setdefaultconnectionstring() resolve my problem
对此的简短回答可能不会发生,因为这意味着您需要将所有源文件添加到当前项目并更改亚音速加载连接字符串的方式。
如果您担心密码被部署到客户端,那么使用效果出色的集成安全性可能是一个更好的主意。
另外,您没有指定您正在使用哪个版本,因为我认为修改 v3 更容易一些
The short answer to this is probably not going to happen because it would mean that either you need to add all the source files to your current project and change the way subsonic loads the connection string.
If you are worried about passwords being deployed to the client then it might be a better idea to use integrated security which works brilliantly.
Also you did not specify which version you are using , since modifying v3 is a little easier in my opinion