Re: How to protect my SQL Server queries

If the remote server is part of the same domain, or a domain trust is setup
then just use windows authentication to protect your credentials.

If thats not the case, then you can encrypt the communications either over
SSL or IPSEC (see
http://www.microsoft.com/technet/prodtechnol/sql/2000/maintain/sp3sec03.mspx
for links to KB's for both)

I'd also recommend that you don't pass sql queries across the wire, and
instead use stored procures where possible. You should also consider
encrypting the data in your database. In sql 2000 you can either do that via
the code in your application, or via a SQL encyption library. There are a
number of commercial ones, but theres also an excellent free one @
http://www.sqlservercentral.com/columnists/mcoles/freeencryption.asp (note:
SQL 2005 has built-in support for encryption)

Cathal
"Dino Buljubasic" <dino@xxxxxxxxxxxxxxxxxxx> wrote in message
news:uqb7g1p5g77l8dh7c5eq36d47o94rlsg60@xxxxxxxxxx
> Hi,
>
> My application is extensivelly querying a remote server. Somebody
> sniffing the traffic could eventually find out all important
> information such as passwords (from users in datatables as sell as the
> password and user name used in connectiong string to that server.
>
> How can I protect my self from this?
>
> Thank you
> _dino_


.

Relevant Pages

  • Re: Security - Public vs Non-Public
    ... and open the subweb/site on the remote server via FP and set the permission, ... etc. by hand or purchase a pre-written script, however you can only protect .asp pages, you can not ... FrontPage Resources, WebCircle, MS KB Quick Links, etc. ... > knowledge to protect the subsite so that only authorized users can "view" ...
    (microsoft.public.frontpage.client)
  • Re: missing indexes
    ... My sql version is: Microsoft SQL Server ... >I've simplified the query a little, but it's still causing the error in my ...
    (microsoft.public.sqlserver.programming)
  • Re: DTS and the Internet
    ... Unfortunately I am new to SQL and DTS thus I would need more guidance. ... For instance the only "add a connection" topic is related to ... >>Where and in what format should I declare to DTS the remote server. ...
    (microsoft.public.sqlserver.dts)
  • Re: downloading files from another server through aspx
    ... Any suggestions on good articles on setting up ... Installing IIS on the SQL box is a good suggestion, ... we're not allowed to have both IIS and SQL ... > who could connect to that remote server to allow it to run as that user. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Where are server connections stored in project?
    ... SQL Instant on your PC at work, your laptop, and remote server. ... The above connection string will work with all three machines: ...
    (microsoft.public.dotnet.framework.adonet)