Skip to main content

How to “Encrypt Decrypt” Connection String in “Web.config” Asp.Net C#?

In this post, I am going to share the “How to encryption a connection string of “web.config” file in ASP.Net MVC C# using “DataProtectionProvider” data protection section as,

ConfigSection.SectionInformation.ProtectSection("DataProtectionConfigurationProvider");
//Step 1:  This below code is use to Encrypt connection string.

namespace EncryptDecrypt_WebConfig
{
    public class MvcApplication : System.Web.HttpApplication
    {
        protected void Application_Start()
        {
            AreaRegistration.RegisterAllAreas();
            FilterConfig.RegisterGlobalFilters(GlobalFilters.Filters);
            RouteConfig.RegisterRoutes(RouteTable.Routes);
            BundleConfig.RegisterBundles(BundleTable.Bundles);

            //ENCRYPT DECRYPT WEB CONFIG SECTIONS.
            EncryptDecryptWebConfigSettings();          
        }

        /// <summary>
        ///  ENCRYPT DECRYPT WEB CONFIG SECTIONS.
        /// </summary>
        private static void EncryptDecryptWebConfigSettings()
        {
            // This is used to get application configuration.
            Configuration configurations = WebConfigurationManager.OpenWebConfiguration("~");

            // Get connection string of app settings.
            ConnectionStringsSection connSectionString = (ConnectionStringsSection)configurations.GetSection("connectionStrings");
            AppSettingsSection appSettingSection = (AppSettingsSection)configurations.GetSection("appSettings");

            var settingInfo = connSectionString.SectionInformation;
            //This is used to protect multiple sections in web.config
            if (!settingInfo.IsProtected)
            {
                settingInfo.ProtectSection("DataProtectionConfigurationProvider");
                settingInfo.ForceSave = true;
            }
            if (!settingInfo.IsProtected)
            {
                settingInfo.ProtectSection("DataProtectionConfigurationProvider");
                settingInfo.ForceSave = true;
            }

            // Save modified config settings file.
            configurations.Save(ConfigurationSaveMode.Modified);
        }
    }
}




//Step2 : Before Encrypted connection string look like below code.

<connectionStrings>
    <add name="connectionStrings" connectionString="Data Source=.; Initial Catalog=TestDB;User ID=sa;Password=pwd" />
</connectionStrings>



//Step 3: After Encrypted connection string look like below code

  <connectionStrings configProtectionProvider="DataProtectionConfigurationProvider">
    <EncryptedData>
      <CipherData>     <CipherValue>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
</CipherValue>
      </CipherData>
    </EncryptedData>
  </connectionStrings>

//The ASP.Net code update code automatically after encrypted connection string. 
//You can see the above code.



//Step 4 : You can easily access connection string in your application i.e.

string conn = ConfigurationManager.ConnectionStrings["connectionString"].ToString();

Reference links,
https://msdn.microsoft.com/en-us/library/ms254494(v=vs.110).aspx
http://www.aspsnippets.com/Articles/Encrypt-and-Decrypt-Connection-String-in-AppConfig-file.aspx
http://stackoverflow.com/questions/11637348/encrypt-connection-string-in-app-config
http://stackoverflow.com/questions/5803188/encrypting-connectionstrings-section-utility-for-app-config

 I hope you are enjoying with this post! Please share with you friends. Thank you!!

Labels

Labels:
By Anil Singh | Rating of this article (*****)

Popular posts from this blog

List of Countries, Nationalities and their Code In Excel File

Download JSON file for this List - Click on JSON file    Countries List, Nationalities and Code Excel ID Country Country Code Nationality Person 1 UNITED KINGDOM GB British a Briton 2 ARGENTINA AR Argentinian an Argentinian 3 AUSTRALIA AU Australian an Australian 4 BAHAMAS BS Bahamian a Bahamian 5 BELGIUM BE Belgian a Belgian 6 BRAZIL BR Brazilian a Brazilian 7 CANADA CA Canadian a Canadian 8 CHINA CN Chinese a Chinese 9 COLOMBIA CO Colombian a Colombian 10 CUBA CU Cuban a Cuban 11 DOMINICAN REPUBLIC DO Dominican a Dominican 12 ECUADOR EC Ecuadorean an Ecuadorean 13 EL SALVA...
Read more

nullinjectorerror no provider for httpclient angular 17

In Angular 17 where the standalone true option is set by default, the app.config.ts file is generated in src/app/ and provideHttpClient(). We can be added to the list of providers in app.config.ts Step 1:   To provide HttpClient in a standalone app we could do this in the app.config.ts file, app.config.ts: import { ApplicationConfig } from '@angular/core'; import { provideRouter } from '@angular/router'; import { routes } from './app.routes'; import { provideClientHydration } from '@angular/platform-browser'; //This (provideHttpClient) will help us to resolve the issue  import {provideHttpClient} from '@angular/common/http'; export const appConfig: ApplicationConfig = {   providers: [ provideRouter(routes),  provideClientHydration(), provideHttpClient ()      ] }; The appConfig const is used in the main.ts file, see the code, main.ts : import { bootstrapApplication } from '@angular/platform-browser'; import { appConfig } from ...
Read more

React | Encryption and Decryption Data/Text using CryptoJs

To encrypt and decrypt data, simply use encrypt () and decrypt () function from an instance of crypto-js. Node.js (Install) Requirements: 1.       Node.js 2.       npm (Node.js package manager) 3.       npm install crypto-js npm   install   crypto - js Usage - Step 1 - Import var   CryptoJS  =  require ( "crypto-js" ); Step 2 - Encrypt    // Encrypt    var   ciphertext  =  CryptoJS . AES . encrypt ( JSON . stringify ( data ),  'my-secret-key@123' ). toString (); Step 3 -Decrypt    // Decrypt    var   bytes  =  CryptoJS . AES . decrypt ( ciphertext ,  'my-secret-key@123' );    var   decryptedData  =  JSON . parse ( bytes . toString ( CryptoJS . enc . Utf8 )); As an Example,   import   React   from ...
Read more

Top 15+ Angular 17 Interview Questions Answers | For Experienced Professionals as well

G Google team released the latest version of Angular – Angular 17 on November 6, 2023, creating a significant milestone for the super fast front-end development. What Are the New Features in Angular 17? 1.       Angular 17 is the highly anticipated release for the community, bringing many new exciting features, updates, and improvements. 2.       New Syntax for Control Flow in Templates - new @if, @switch, @for, @case, @empty @end control flow syntax 3.       Deferred Loading - @defer partial template 4.       The Angular signals API 5.       Angular SSR and client hydration 6.       Automatic Migration to Build-in Control Flow 7.       Build Performance with ESBuild 8.       By default, set this newly generated component as a standalone, and now we don't have an app module file. To use (ng...
Read more

Why doesn't App Module exist in Angular 17?

Today, I just started exploring Angular version 17 using ng new and found a problem for the newly created project using the command - ng new. The problem is: Path "/src/app/app.module.ts" does not exist while doing ng add in the Angular project. The ‘ng new’ does not generate app.module.ts in the src root folder Angular CLI 17.0.0. From Angular 17 onwards, standalone is now the new default for the CLI . So when we create a new project ‘ app.module.ts ’ file will not create Path " /src/app/app.module.ts ". Run the following command to create the new project including the file ‘app.module.ts’ in your project: ng new AngularMap  --no-standalone Note: Here ‘AngularMap’ is the project name I created. Standalone components are a feature introduced in Angular version 14. Now the changes applied in angular 17 default, the Angular team strongly recommends using them as they are easier to use, and understand.
Read more