I have a web site that loads dynamic data from SQL. As part of the Admin function, a user can authenticate using forms authentication and then modify data.
My ISP only allows one sql username, which I must use to update my database and which anonymous users use to view data with.
It means that I have only one account that does reading and writing of data.
My preferred option will be to have one account that can read data and one account that can read and write data. Then use the full permission account after the user authenticated using forms.
Due to my ISP limitations, I'm not allowed that setup. How can I protect my data? I there another way of defining the connectionstrings? Encryption of the connectstring will help by hiding it, BUT the web will still use the same account.
Greetings
Gert
...
Go to the complete details ...