动态为连接字符串提供用户名和密码

Question

I am using C# winform application using MySql as back-end database. Using App.config file, application read connection string to connect database as follows:

<?xml version="1.0" encoding="utf-8" ?>
 <configuration>
   <connectionstring>
  <addkey="MySQL.DB"value="server=localhost;database=mysqldbname;user=username;password=12345678;">
   </add>
 </connectionstring>
 </configuration>

Is there any way that we can provide username and password not from App.config but from user of application, by entering username and password? so that we are able to protect sensitive data. Other information are ok to read from app.config like database name, server etc.

Ahmed

Answer 1

you can have appSettings

   <appSettings>
        <add key="ConFormat" value="server=localhost;database=mysqldbname;user={0};password={1};"/>
    </appSettings>

read it and set the values

var formatString  = ConfigurationManager.AppSettings["ConFormat"].ToString();
var conString  = string.Format(formatString , SecureUserName, SecurePW);

Answer 2

If you're using raw ADO.NET then you can use a connection string builder, presumably a MySqlConnectionStringBuilder in your case. Create a new instance with the connection string from the config file, set the appropriate properties and then get the result from the ConnectionString property.

By the way, you can store passwords and other sensitive data in the config file using Protected Configuration to encrypt it.

Answer 3

Change the code in app.config like this

<add key="MySQL.DB"value="server=localhost;database=mysqldbname;user=&usernamefromuser;password=&passfromuser;">

Add a button for connecting and 2 textboxes for username and password

Buttons code :

//other code for mysql variables ...
string connectionStr= connStrFrom_App_Config.Replace("&usernamefromuser",texBox1.Text).Replace("&passfromuser",textBox2.Text);
//other code for connecting