CODEWITHSUNDEEP
asp.net
emily-bcot
emily-bcot

Reputation: 1

why hackers can decrypt my encrypted Connection String in web.config(C#)

My application is on the shared Hosting.I've encrypted my Connection String programmatically to make it secure. However, the hacker still is able to decrypt the encrpted Connection String adding scripts into the DB. Just wondering if there is a way to solve this problem? Many thanks !!!

Upvotes: 0

Views: 457

Answers (2)

tommy5dollar
tommy5dollar

Reputation: 31

.NET vulnerability discovered last September.

Make sure your .NET is up to date!

Upvotes: 1

Piskvor left the building
Piskvor left the building

Reputation: 92752

If the hacker gains control over your server, he can do anything your code can do. Can your code decrypt the Connection String? (apparently yes) Then he can do it, too.

Upvotes: 0

Related Questions