Options to connect SQL Server database securely

Hello All,
I am working on one of desktop application and requires very high security features related to database. One thing I require is do not want to store connection string in computer where application is installed i.e(App.Config) file.
Also do not want to store it securely because during connection establish anyone can sniff the traffic and may capture whole connection string and so SQL server.
One solution to my problem is build web service layer so that we do not need to concern about database connection. However as I am in middle of development, this option seems last hope for me.
So I required help about another options that can fulfill my requirement security about SQL server connection string and database.
Anyone having any idea?
Regards,
Dharmesh Solanki

Hi dmsolanki,
This forum is to discuss problems of C# development. Your question is not related to the topic of this forum. So I suggestion you post the question in the SQL SERVER forums at
http://social.msdn.microsoft.com/Forums/en-US/home?forum=sqlsecurity
It is appropriate and more experts will assist you.
Thanks.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

Connecting sql server database as source system into BW in unix/oracle

Hi
We have a requirement to extract the data from MS SQL server database as a source system into the BW3.0B instance, which is running under HP-UX/oracle.
We have been told that Microsoft does not supply a SQL Server driver for UNIX.
So in this case, we need to have a option to complete it.
Please let me know if some one has any similar type configuration existing.
VJ

In general, BI application servers can only be supported for DB Connect on operating system versions where a SAP Database Shared Library (DBSL) has been released for the BI database and the source database.
refer: http://help.sap.com/saphelp_nw70/helpdata/EN/58/54f9c1562d104c9465dabd816f3f24/frameset.htm for DB Connect supported DB's.

Connecting SQL Server 2008 + CF8 mac

Hello,
I am currently porting all of our access databases to SQL Server 2008 and i am using a mac for development. If anyone can tel me how to connect sql server database from the cfadmin on mac to a virtual environment on parallels 5. In the cfadmin on mac SQL Server is listed as a kown datasource you can connect to but the only way i see to do this is thru a virtual environment or remote.
Please help
Thanks,
D

Having not used Parallels in some time I couldn't say for sure, but essentially that SQL engine needs to be accessible from Coldfusion on an IP address somewhere. Depending on what networking mode you're using, that'll either be:
1 - Its own IP
2 - Localhost, or 127.0.0.1
As long as your ColdFusion instance has network access to the SQL box, there's no additional config required.
O.

SQL Server database (read-only mode) in Oracle SQL Developer

Hello,
I connected SQL server database with Oracle SQL Developer 3.2.10.09, everything looks good except i can only browse data, i cannot change data in tables cannot insert new or delete rows. Query is also disabled (i got message: Query Builder is not supported for this connection type.) I used Third Party JDBC Drivers - jtds-1.2.6.jar as my connection to SQL server. Is there a way to change data in tables?
Thank you.

AFAIK editing table data in the grid is only possible with an Oracle database. On MS SQL you'll have to use update statements in the worksheet.
Hope that helps,
dhalek

Connecting SQL server from Adobe forms

Hi Experts,
I want to know, whether it is possible to connect SQL Server database from Adobe Form directly at runtime without WAS/ADS. If it is possible, please provide any material to proceed further.
Please help.
Thanks,
Rajee

Have a look at the following document, it explains how to use a MS Access database but it should also work when using a ODBC Data source configured for a MS SQL database.
[Providing interactive database lookup from forms|http://www.adobe.com/devnet/livecycle/articles/lc_designer_db_lookup_tip.pdf]
I hope I could help you.

How can I connect to SQL server database thru local network by using JSP?

I'm currently doing a project by using JSP..And I need to display record from the SQL Server database in our school's local network. May I know how can I do that? How can I write the code so that I can able to access the SQL Server databsase Throught school's network by using JSP? Please tell me step by step how can I do that. I'm using Tomcat 4.1 as Web Server. And I had J2SE and J2EE installed in my computer.

first you have to establish a ODBC DSN on your computer,
that connects to the database...you can do that from your control pannel.
i assume that the TOMCAT server is residing on your computer....(if the webserver is in other computer then you would have to create a System DSN on the data sources ODBC option in the settings>control pannel of that machine)
then you can use that DSN name to connect to the data base from the class file....for further assistance on how to create the class that access the tutorials in sun site.
regards
G

How to connect a PDF form to SQL server database through web service?

Hi,
I'm new to LiveCycle designer. I have designed a PDF form in LC designer ES2, which suppose to take a personnel number and retrieve the personnel information from a SQL server database. Currently its working fine with XML data and a search button, but I need to securly connect to a database through web service. I know how to connect to a wsdl file through designer. What I need is a wsdl file to connect the form to database. For this purpose, is there any WSDL code to use as the web service?
I really appreciate your help and advice.

Hi,
I'm new to LiveCycle designer. I have designed a PDF form in LC designer ES2, which suppose to take a personnel number and retrieve the personnel information from a SQL server database. Currently its working fine with XML data and a search button, but I need to securly connect to a database through web service. I know how to connect to a wsdl file through designer. What I need is a wsdl file to connect the form to database. For this purpose, is there any WSDL code to use as the web service?
I really appreciate your help and advice.

Unable to connect to sql server database

i run on CMD:
aspnet_regsql -C "Data Source =Davidchamoun/sqlexpress : intergrated security= true" -ssadd -sstype p
i got
a network-related or instance-specific error occurred while establishing a connection to sql server. the server
was not found or was not accessible. verify that the instance name is correct and that sql server is configured to allow remote connections. (provider: SQL Network interfaces . error: 25 – connection string is not valid
unable to connect to sql server database.
im using sql sever 2012 express, microsoft visual studio web 2008 express.
please help me.

i run it as :
aspnet_regsql -C "Data Source =Davidchamoun\sqlexpress : integrated security= true" -ssadd -sstype p
i got the same error :
an error has occurred . details of the exception:
a
network-related or instance-specific error occurred while establishing a connection to sql server. the server was not found or was not accessible. verify that the instance name is correct and that sql server is configured to allow remote connections. (provider:
SQL Network interfaces . error: 25 – connection string is not valid
unable to connect to sql server database.
im using also windows 8.1
pls help me
ty for ur reply

Error message when trying to connect to a SQL Server Database

All:
I get the following message when I try to connect to a SQL Server Database within a form:
"Connection for Source DataConnection failed because the environment is not trusted"
Can anyone help me solve this problem?
Thanks,
BR

Hi Brian,
In Acrobat, security concerns dictate that you cannot specify an ODBC connection string by using the Driver=; syntax. Therefore, the client computer using the form needs to have a DSN pre-configured for ODBC connections.
Denver
Adobe Enterprise Developer Support

Best practise for creating an application that connects to a SQL Server database

I have created an application that connects to a SQL Server database and views information using a datagrid and performs several updates when a button
is selected.
I have created a SQLcontrol.vb using the following code:
Imports System.Data.Sql
Imports System.Data.SqlClient
Public Class SQlControl
'connection 1
    Public SQLCon As New SqlConnection With {.ConnectionString
= "Data Source=;Initial Catalog=;Integrated Security=True"}
'connection 2
    Public SQLCon1 As New SqlConnection With {.ConnectionString
= "Data Source;Initial Catalog=;Integrated Security=True"}
    Public sqlcmd As SqlCommand
    Public sqlda As SqlDataAdapter
    Public sqldataset As DataSet
    Public Function hasconnection() As Boolean
        Try
            SQLCon.open()
            SQLCon.close()
            Return True
        Catch ex As Exception
            MsgBox(ex.Message)
            Return False
        End Try
    End Function
    Public Sub runquery(query As String)
        Try
            SQLCon.Open()
            sqlcmd = New SqlCommand(query,
SQLCon)
            'LOAD
SQL RECORDS FOR DATAGROD
            sqlda = New SqlDataAdapter(sqlcmd)
            sqldataset = New DataSet
            sqlda.Fill(sqldataset)
BH READ DIRECTLY FROM THE DATABASE
            'Dim
R As SqlDataReader = sqlcmd.ExecuteReader
            'While
R.Read
            'MsgBox(R.GetName(0)
& ": " & R(0))
            'End
While
            SQLCon.Close()
        Catch ex As Exception
            MsgBox(ex.Message)
            'will
close connection if still open
            If SQLCon.State
= ConnectionState.Open Then
                SQLCon.Close()
            End If
        End Try
    End Sub
    Public Sub runquery1(query As String)
        Try
            SQLCon1.Open()
            sqlcmd = New SqlCommand(query,
SQLCon1)
            'LOAD
SQL RECORDS FOR DATAGROD
            sqlda = New SqlDataAdapter(sqlcmd)
            sqldataset = New DataSet
            sqlda.Fill(sqldataset)
BH READ DIRECTLY FROM THE DATABASE
            'Dim
R As SqlDataReader = sqlcmd.ExecuteReader
            'While
R.Read
            'MsgBox(R.GetName(0)
& ": " & R(0))
            'End
While
            SQLCon1.Close()
        Catch ex As Exception
            MsgBox(ex.Message)
            'will
close connection if still open
            If SQLCon1.State
= ConnectionState.Open Then
                SQLCon1.Close()
            End If
        End Try
    End Sub
End Class
A code for one of my button which views displays data grid contains the following code:
Private Sub Button1_Click_1(sender As Object,
e As EventArgs) Handles Button1.Click
        If SQL.hasconnection
= True Then
            SQL.runquery("select
* from tablea")
            If SQL.sqldataset.Tables.Count
> 0 Then
                DGVData.DataSource = SQL.sqldataset.Tables(0)
            End If
        End If
    End Sub
I am fairly new to vb.net and have read a few books and followed a few tutorials on youtube, what I would like to know is, are there any disadvantages
to the way I have connected to a SQL database using the SQLControl.vb. A lot of the vb books include data adapter and dataset within the form, I'm not sure if I'm following best practice by have the connection details outside of the form.
My other question is, I have created two connections in the SQLControl and call these connections within the same form using the same data adapter
and dataset. It all works fine but I just wanted to know of any potential issues?
Public SQLCon As New SqlConnection With {.ConnectionString
= "Data Source=;Initial Catalog=;Integrated Security=True"}
'connection 2
    Public SQLCon1 As New SqlConnection With {.ConnectionString
= "Data Source;Initial Catalog=;Integrated Security=True"}
Thanks

My other question is, I have created two connections in the SQLControl and call these connections within the same form using the same data adapter and dataset. It all works fine but
I just wanted to know of any potential issues
1) You are not using Sepration of concerns for a solution that is doing data access, like using a DAL.
http://en.wikipedia.org/wiki/Separation_of_concerns
2) You are directly issuing SQL commands at the UI, leading to sql injection attacks.
3) You are not using a UI design pattern, which leads you to tightly couple database activity to the UI.
http://www.codeproject.com/Articles/228214/Understanding-Basics-of-UI-Design-Pattern-MVC-MVP
@System243trd, parameters are important to prevent SQL injection attacks (people will insert SQL commands into the database if you do not perform basic checking of what you are passing to the database). If you write a stored procedure try to make
the variables the correct SQL server data type to avoid problems later of people trying to call it directly.  Darnold924 is right, I see no code to prevent against SQL injection attacks. In addition, during development in some instances LocalSQLDB
database system is used and during deployment you usually need to use the production SQL server database. Moreover, Linq-to-SQL is used on Windows Phone 8.1 and it is required for phone development later and so I highly recommend learning
it if you plan on developing windows phone applications.
@System243trd, If you want the code for the windows phone app I think it uses the MVVM model or that might be for universal apps or regular windows phone apps. I have been using the windows phone Silverlight pivot or panorama template (it might
be pieces of both). I've already submitted to the windows phone marketplace and it had to go through certification first. I plan on later making an article on it but I need to first fix one or two simple problems I have with it. Here's a link to
the source code if you later want to look at the source code (in vb.net):
https://jeffsblogcodesamples.codeplex.com/downloads/get/1445836
Once you eliminate the impossible, whatever remains, no matter how improbable, must be the truth. - Sherlock Holmes. speak softly and carry a big stick - theodore roosevelt. Fear leads to anger, anger leads to hate, hate leads to suffering - Yoda. Blog
- http://www.computerprofessions.us

Can dw cs3 connect directly to sql server database without a testing server?

I'm new to dreamweaver but have used script tools that link
directly to my sql server database.
Not in dw, so far. As of this early stage, I don't have or
want to use a web server, and it's blocking me
without one. I just want to prototype without a testing
server, directly to my database. And while I'll try php
later, I didn't want to have to get into it or cold fusion,
etc. right away.
Can dw connect directly to sql server database without a
testing server?
I'm running XP sp 3 at this point, and don't see IIS. There's
probably some security issues
I'll have to tangle with. The goal is for my website to end
up on the company intRAnet, not the www.
fwiw, I can Build in Data Link Properties and get a
successful test to my sql server database via
Microsoft Data Link, but once I go back and try the test in
OLE DB Connection it balks on the testing server,
as I don't have one locally or otherwise. Isn't there a way
to link to db without a testing server?
Thanks for any insights.

Art wrote:
> You can connect to SQL server using ODBC in windows.
Yes, you can. However, Dreamweaver's PHP server behaviors
work only with
MySQL. To connect to any other database, you need to hand
code
everything yourself.
David Powers, Adobe Community Expert
Author, "The Essential Guide to Dreamweaver CS3" (friends of
ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/

Connecting BO universes with SAP on a SQL server database

Hello,
The aim is to make a secured connection between a BusinessObjects universe and an SAP system that runs on a SQL server database.
We will have in the nearby future 1 SAP system for several customers (SAP in the clouds). For those customers we want to maintain their BusinessObjects connection with the SAP system as it is for the moment. This means that the customers who are working with their current BO system (5.1.6) connect for the moment between BusinessObjects and their local SAP system via the universe connection (Oracle driver and user). These customers should connect in the nearby future to a central SAP system and only be able to see the data of their own company (based on a client number). Iu2019m wondering if we could use the SAP-authorisation mechanism in order to do so. This would mean that we define an SAP user in SAP and that we define the same user in BusinessObjects and that there is a layer in between (cfr. The sap java connector) that allows a secure connection for a client to only its specific data (based on client number f.i.)
Can you tell me if there exists already a solution for this for BO 5.1.6 or what is the pre-requisite in order to do so. I know that the Best Practices of SAP-Bo use already this kind of mechanism but then we talk about BO XI 3.0 and ECC 6.0 linked via a Java Connector. Does there already exists something like that for the connection between an SAP system (on a SQL server database) and a BusinessObjects 5.1.6 system.
Thanks in advance for your answer.
Thierry Renaer

Hello,
Thank you for your reply. And what about BO XI 3.0? What should we be using?
Ik have been using the SAP Java Connector but I'm wondering if there exists more user friendly (read easily adaptable) tools in order to provide a secure connection between SAP BO XI 3.0 and SAP ECC.
Many regards
Thierry Renaer

Connecting to a SQL Server Database

Can someone please point me to a guide or tutorial that
explains the basics for connecting to an SQL Server Database. I'm
just installed Coldfusion Developer Edition and Microsoft SQL
Server Studio Express on Windows Professional. Do I go into the
administration section of Coldfusion to add the database so that
the datasource can then be used in my Coldfusion application? What
other steps are there?

Briefly,
1. Create the database using SQL Management Studio Express.
2. Set up your MSSQL security by following the tricks in
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=kb400255
3. Go to ColdFusion administration and create the datasource,
as you suspected. Enter T30\SQLEXPRESS as the server, where T30 is
your windows computer name (obviously different, unless your naming
conventions and the choice of laptop matches exactly mine ;-). Your
SQLEXPRESS instance name might also differ, but that's the default
I guess.
4 That's it, you're ready to go.
5. If things don't still work, start the SQL Server Browser.
(It's a Windows service installed by MSSQL Server). I haven't
figured out quite what this does, but it solved the problem for me.

Using integrated security to access SQL Server database

Hi,
Currently we are using username/password combination to log in to a SQL Server database. These varaiables are defined as environment variables.
For security reasons we now want to use integrated security of the SQL Server database. This way the connection will be with the NTUser the Nodemanager has been started with.
Can this be done in Fort�?

I do not think there is a way to pass the NT user's security authentication over to the DB in UDS.
ka

Sql developer won't connect with SQL server database on cluster

Hello,
I have a microsoft SQL server database on a windows cluster. Name for this cluster is like XXX/YYY
When I try to connect to this database with SQL developer, I get a failure, mentioning:
"Status : Failure -Cannot connect to Miscrosoft SQL Server on XXX/YYY"
As far as I know, I have installed the correct jtds driver (version 1.2.5), since I can connect to sql server databases on single server hosts.
Does anyone know how to connect to databases on windows clusters?
Edited by: Ingmar on Jan 16, 2012 4:08 PM
Edited by: Ingmar on Jan 16, 2012 4:22 PM

Hi Ingmar,
Try this is in the port box
1433/dbname;instance=YYY
dbname can be omitted
-Turloch
SQL Developer team
1/Giving an instance name in SQLDeveloper connection to SQL Server (from August 2011)
MS SQL Server Connection
The correct syntax to deal with this is in the port box
1433/dbname;instance=instance
dbname can be omitted
2/cluster configuration (uses instance name)
http://stackoverflow.com/questions/1160024/jdbc-connect-string-for-sql-server-cluster
where vvv\iii is the cluster address: jdbc address is:
"jdbc:sqlserver://vvv;instanceName=iii"
3/jtds url details available in
http://jtds.sourceforge.net/faq.html

Options to connect SQL Server database securely

Similar Messages

Maybe you are looking for