VB Connection String - ensure secure connection

• JF1081

  SSC Eights!

  Points: 982

  More actions

  September 22, 2008 at 3:28 pm

  #382776

  I am writing a Window Application that takes data from a csv file that I prepare on my local computer and updates data on a SQL Server 2005 database.

  What is the likelihood that somebody can capture that connection string while I am connecting/connected to the database?

  Once I am connected to the DB, I use an Update Query in my program to update the fields I need. I will eventually use a stored procedure, but for now this is quicker and I am not worried about SQL injection since I am the only one using this program.

  Upon closing the program, I close() and dispose() the connection.

  My main concern is that the connection is secure and nobody can see my connection string. Is that the responsibility of my program (the client) or of the server where the SQL DB is located? If it is something that has to be done in the program, I would appreciate if somebody could point me in the right direction

  This is not a web application. It is being written with Visual Basic 2005 as a Windows Application. When searching on Google all I can find is information about putting the connection string in the web.config file for a web app.

  Thanks!!