Badmiral
Badmiral

Reputation: 1589

Connection string for anonymous user

I have a website that is used for uploading data to a restricted database. Usually when I built out connection strings for SQL Server inserts, it was from an in house user so I could use windows authentication, what's the best practice for when the user does not have access to the database?

Upvotes: 0

Views: 956

Answers (3)

Marco
Marco

Reputation: 5109

The best practice is to authorize your IIS APPpool where your website is running on... You can simply do this by creating a user in sqlserver.... FOr example IISApppool\Yourapppoolname. You can find the name of the pool where your site is running in the IIS manager.

Upvotes: 1

You have to use a SQL user specific to the website.

Upvotes: 0

Related Questions