This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 86%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Hi, I'm currently working on a project which need data from other databases. The database where I'll get the datas are depends on users. Now I want to make my connectionString dynamic. Is it correct to make connection strnig dynamic. The user will enter the connection string registration and I'll save it in my local database. And then I will get datas from there with adonet. Is it right way of coding or there is other ways to do this better?
Hi @Atilla Rüstəmli
If you're using an ORM framework, such as Entity Framework for .NET which provides built-in support for dynamic database connections. It allows you to configure connection parameters through configuration files or code.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 61%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
the only real issue is security. if the connect string require user and password, then you need to securely store the string. if the connection is integrated, then if the app is a desktop app, no issue, but if website, then the connection will be made with the pool account. a user could enter another users connection string to access their data.
Thanks for answer. But if they have other person's connection string, they only need to find any sql developer or just learn the basics and that is it. They'll get all datas from database.
The user will enter the connection string registration and I'll save it in my local database. And then I will get datas from there with adonet. Is it right way of coding or there is other ways to do this better?
I do not think it (i.e., "The user will enter the connection string") is good idea due to security reasons. Why don't you create the user-dependent connection string at the server side?
Cause I'll get datas from different databases. In use-dependent connection string there is a static con. stirng in appsettings. I need it to be flexible.
The important thing here are passwords. If these strings are for integrated security, I'm less nervous. If there are passwords, you really need to think about some encryption mechanism. Storing passwords in plaintext in the database is not OK.
Ok, thank for and advice. I'll be more carefull