Securing connection to SQL Server

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Oh my God - I haive just discovered that my connection details are visible to all and sundry....

I am using a connect.inc file referenced inside my asp's. The inc file is in the same folder as the asp's. The inc file contains both user and password details for the database.

Set con = Server.CreateObject("ADODB.Connection")
CONSTR = "DSN=mydsn;UID=user;PWD=password;"
con.Open CONSTR
All that a user has to do is type http://mysiteurl.com/connect.inc and hey presto - there's all the info.

I dont want to put the connection details directly into the asp pages as there are so many of them.

HELLLLLLPPPPPPP !!!!