Question Security of clear text connection string

[pisceswzh]

Hi,

In my program, I use the following connection string to connect my windows form program to the SQL server. Since I believe the program communicates with the server using clear text, I am just wondering if it is possible that the password for the SQL server be intercepted. If so, how can I prevent it from happening?

Thanks.

My connection string:

Server = 222.102.22.4; Database = myDB; User Id = sa; Password = 123ABC123abc

 

[JohnH]

Look into using trusted connection/integrated security, which uses the Windows authentication and don't send credentials over network. This article discuss this and other security matters: Building Secure ASP.NET Applications: Authentication, Authorization, and Secure Communication

 

[pisceswzh]

Thanks. Let me first go thru this.