Re: How do I make my database secure?

Besides what said in other post, when storing sensitive data, such as credit
card info, you should not store the data in database as clear text. You
should encrypt the data itself before place it into database. And then when
your app reads these data, you decrypt them. So that the data is not
physically readable by anyone other than your app.

"COHENMARVIN" <cohenmarvin@xxxxxxxxxxx> wrote in message
news:1132253676.405124.194210@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>I have a sql server database hosted by an ISP. It has credit card
> fields. I want to make the database secure.
> My asp.net pages refer to the database as follows:
> strConnection =
> ConfigurationSettings.AppSettings["ConnectionInformation"];
> Which means they get the connectionstring for the database from a
> web.config file.
> The web.config file has the following tags:
> <appSettings>
> <add key="ConnectionInformation"
> value="Server=sql2k5.earthweb.com;Database=merc_One;uid=usa_hvtest;password=vinyl"
> />
> </appSettings>
> Is there some way to encrypt the connection string? Would it be
> encrypted in the web.config? Could some hacker get at the web.config?
> Are there any other security measures I could take? For instance,
> could the creditcard fields be encrypted in the database?
> Thanks in advance for any pointers.
> -- Marvin
>


.

Relevant Pages

  • Re: Linux internet cafe
    ... The above can all be done with a bit of PHP and a MySQL database. ... > log out or add funds before the prepaid account is depleted. ... The credit earned on purchases will be stored in the ... The problem with the world is stupidity. ...
    (alt.os.linux)
  • Re: how to insert a row in existing table from within field code
    ... providing that information, anymore. ... I've always wanted to give credit where credit is due, ... Leigh is the person who came up with the approach, ... exported from an online database program, so I'd have to create a ...
    (microsoft.public.word.mailmerge.fields)
  • Re: Converting WMP9 database for WMP10 use
    ... You give far too much credit - this is just an NNTP newsgroup, ... See http://zachd.com/pss/pss.html for some helpful WMP info. ... updates and about how they build a new WMP database - I *thought* ... So if you have metadata stored for file-types like WAV or MIDI ...
    (microsoft.public.windowsmedia.player)
  • Re: OT - Lets Make A Deal
    ... Technobarbarian wrote: ... so you will have to pass that credit on to someone else. ... I wrote a small database application in MS Visual FoxPro and used ... The random number generator is seeded from the clock and it doesn't ...
    (rec.outdoors.rv-travel)
  • Re: Database encryption.
    ... > I am writing application that encrypt paradox type database with IDEA ... which is used to mark end of string. ...
    (sci.crypt)