C# - Replacing characters in a string

Question

I have a string that contains a login, database, and a password.

string str = "user Id=abc, database=DDD, Password=mypasswd"  

I want to be able to replace the database value "DDD" with a different value.

I tried using the string.Replace, but I won't know what the existing database will be.

Does anyone know of a simple solution?

Answer 1

Following is the only recommended way by MSDN to prevent Connection String Injection Attacks

http://msdn.microsoft.com/en-us/library/ms254947.aspx

// cs stores previous connection string which came from config

System.Data.SqlClient.SqlConnectionStringBuilder builder = 
    new System.Data.SqlClient.SqlConnectionStringBuilder(cs);
builder.InitialCatalog = "NEWDB";

// you get your database name replaced properly...
cs = builder.ToString();

Based on the type of database or database driver, you have to use different class, for MySql it should be MySqlConnectionStringBuilder and name of property might be Database.