Author: Bohunkus | Posted on: 1/7/2009 5:32:56 PM | Views : 406

  I've read at least a dozen web pages on this subject, but still I have not found an answer to this question.

  All the solutions I have found assume I have full access to the Web Server. I don't. I'm using a shared host (medium trust level), and I'm not allowed CMD line access to run aspnet_regiis.exe. SO, how do I encrypt my connection strings section of the web.config file when I don't have CMD line access?

  I tried programatically encrypting the section from a web page, but I get an "access denied" error. I set the IIS permission on the file to read/write, and I set the ASPNET user permission on the file to read/write, but I still get "access denied." I tried adding requirePermissions="false" in the connectionStrings entry, but that causes an error when the app loads.

  I saw one possible solution which is to use the DPAPI and decrypt the secti ...

Go to the complete details ...