ASP.Net Configuration

[viper1777]

Hi,

I am a relative newbie to ASP.NET 2.0. I have created a web site (ClimbYorkshire.com - Still under development) and I was wanting to add Forms Authentication to the site.

I have watched a couple of webcasts from MS and they tell me to use the ASP.NET Configuration and then click on the Security Tab. Whenever I do this though I wont connect to the remote SQL Server that I will be using.

I have ran aspnet_regsql as advised but this does not help.

Does anyone have any experience in setting up security on a remote SQL Server?

I am using Visual Web Dev EE.


Thanx!

Dave Shaw
Nothing is Impossible, it is just something I haven't got round to doing. - Me
History admires the wise, but elevates the brave. - Edmund Morris

 

[TipGiver]

The ASP.NET configuration is a help-tool that prevents you from writing in the web.config. In that file under the connectionstring xml tag, there should be your connection string(s). Have a search on the web on how to encrypt it. The encryption is actually needed for two reasons: 1.passwords and 2.database path.

 

[viper1777]

Hi, I have sorted this by adding a custom membership provider to the web.config file.

Can any please elaborate on TipGiver's comments about encrypting the connection string in web.config.

I have google many resourses on this, but these are all for programmatically decrypting the connection string. how do I tell me Membership provider to use my encrypted connection string?

Thanx!

Dave Shaw
Nothing is Impossible, it is just something I haven't got round to doing. - Me
History admires the wise, but elevates the brave. - Edmund Morris

 

[TipGiver]

Can I elaborate ? lol

    Imports System.Web.Configuration

    Protected Sub EncryptButton_Click(ByVal sender As Object, ByVal e As System.EventArgs) _
    Handles EncryptButton.Click

        ' open the web.config file
        Dim config As Configuration = WebConfigurationManager. _
            OpenWebConfiguration(Request.ApplicationPath)

        ' indicate the section to protect
        Dim section As ConfigurationSection = config.Sections("connectionStrings")

        ' specify the protection provider
        section.SectionInformation.ProtectSection("RSAProtectedConfigurationProvider")

        ' Apply the protection and update
        config.Save()

    End Sub

 

[TipGiver]

Hmm, i forgot:

    If section.SectionInformation.IsProtected Then
        ' UNprotect it
    Else
        ' Protect it
    End If

Regards!