Im building a application which uses a gridview.
the gridview is also using sqldatasources which i dragged on drop onto the page.
My job has been using the three tier (data,business,etc) style for building their apps, but i feel that using a datasource is much easier and less worry.
My question is, will a malicious user be able to somehow retrieve any database information(queries, database names, etc) with me using a sqldatasource?
Are there any security measures that i need to enforce? I know the connection string is stored in the web.config file, but how safe will that be from a malicious user?
This is work for the government so i have to make sure that there are no security risk.
...
Go to the complete details ...