security - How to securely store database connection details -


In an application that needs to open a database connection, the user name / password description should be sent to the database. What is the safest way to store and use this data?

Depending on the exact method environment, but in general, you store those credentials in that place Doing so that only the user can read that your application is running, for example on Windows, you will store credentials in the registry at an ACL protected location, so that only the user can read it. Alternatively, you can use DPAPI to encrypt the data, making it more secure. In Unix, you will store it in a file that was preserved from chmod (and optionally encrypted) so that only the app can read it.


Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -