C＃安全地将密码另存为字符串以进行Oracle数据库连接吗？

Question

I am trying to connect to Oracle database using ODP.net in C#.

string myuserid;
string mypw;
string connstring =
  "Data Source=(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=myhost)(PORT=1527))" +
  "(CONNECT_DATA=(SID=mysid)));User Id=" + myuserid + ";Password=" + mypw + ";";
using (OracleConnection conn = new OracleConnection(connstring))

I want to use windows form to get myuserid and mypw to use it in a query.

What would be the best way to store this information during the session securely? Is it possible to remove this string after certain time of inactivity?

Thank you in advance..

Answer 1

You can use ProtectedData.Protect to encrypt data in a way that is tied to the local user profile (ie. will only work for the current user on the current machine).

This can then be saved locally, and then passed through ProtectedData.Unprotect to get the password back to build a new connection string.