CODEWITHSUNDEEP
c#sql-serverwinforms
user3114347
user3114347

Reputation: 369

Publishing winform application with .sql files

Maybe someone can help me with the following problem:

I created a winform application in visual studio which i want to publish. The application contains a map Sqlscripts with .sql files in it. 

 FileInfo file = new FileInfo("../Sqlscript/View.sql");
            string SQLscript = file.OpenText().ReadToEnd();

i thought about creating a directory for those files in C:\ when running the application, but ten i realized that it's not safe doing it this way. No one should have acces to sql querys. Can anyone help me for an alternate?

Thanks!

Upvotes: 2

Views: 671

Answers (2)

Gian Paolo
Gian Paolo

Reputation: 4249

Embed your .sql file as resource (i.e, file content will be embedded in compiled code), and read it at runtime with Properties.Resources.yourresourcename

string sql = Properties.Resources.yourresourcename;

To add a file as resource, open Resources.resx in solution explorer -> Add Resource -> Add existing file (or add new text file)

Upvotes: 1

Rob
Rob

Reputation: 4987

Obscurity != security. If someone wants to, they can always get the contents of the file. Be it reverse engineering, or simply reading out the memoty of the program. How important is it that thay can't edit / view the SQL? Otherwise I would generate the SQL on a server somewhere. Make sure the server only accepts parameters and generates / runs the SQL there.

Upvotes: 0

Related Questions