ASP.Net Core Secure Storage of Application Data

Macka 1

Hi,

I'm new to ASP.Net Core and C# in general, so maybe I'm not using the right keywords in my searches...

I'm trying to develop a multi-tenanted app (developing under Win 10, most likely production server will be Ubuntu with Nginx reverse proxy). At this stage, I am leaning towards using a SQLite database per tenant to store both the tenant's data and user login credentials.

This is where I run into my first problem: what is the correct storage location for sensitive application data (in this case the SQLite files)?

The closest thing to an answer I've found was here, but there seems to be a bit of contention as to whether wwwroot is really an appropriate storage location - is this actually an issue? (i.e. can a malicious actor download the files form here like any other static file).

AgaveJoe 26,201 Reputation points

2021-08-18T11:52:11.773+00:00

In ASP.NET Core, wwwroot stores static resources like CSS and JS files. SQLite files are typically stored in the application root. The name of the folder that holds your web application can be anything including wwwroot. But, whatever the root name is you will also have a wwwroot folder within the root folder which stores the static files.
Macka 1 Reputation point

2021-08-19T08:34:00.963+00:00

Right, so if I understand correctly I would do something like this image (this is the folder generated by publishing to a folder):
Yiyi You - MSFT 521 Reputation points

2021-08-24T01:32:24.057+00:00

Hi,@Macka ,

when you do like what AgaveJoe said(as the image shows),is your question solved?