How to set your sensitive data in the application code when creating ADO.NET Model?d some tag a

Question

I am creating a model for a database and was curious at the following statement in the ADO.NET Entity Model wizard where you have the options of choosing Yes or No as where to store sensitive data -

"No, exclude sensitive data from the connection string. I will set it in my application code."

I have never used this option and just wanted to find out if I did where I would have to specify my sensitive data. Any ideas?

Answer 1

Set the connection string argument of the Model constructor:

MyEntities1 db = new MyEntities1 ("metadata=res://*/Model1.csdl|res://*/Model1.ssdl|res://*/Model1.msl;provider=System.Data.SqlClient;provider connection string=';Data Source=localhost;Initial Catalog=myDb;User ID=user1;Password=myPass;MultipleActiveResultSets=True';"); 

Answer 2

Create Encrypted DLL to hold connection string

Modify the constructor of the entities

 // Separate Encrypted DLL file
 public static class secureData()
 {
    public static string ConString = @"Data Source=YOUR_SERVER;Initial 
    Catalog=YOUR_DB;Persist Security Info=True;User 
    ID=YOUR_USER;Password=YOUR_PASSWORD";
 }


 public sampleDBEntities() : base("name=sampleDBEntities")
    {
        this.Database.Connection.ConnectionString =  secureData.ConString ;
    }