Is it correct to make connection string dynamic?

Atilla Rüstəmli 40

Hi, I'm currently working on a project which need data from other databases. The database where I'll get the datas are depends on users. Now I want to make my connectionString dynamic. Is it correct to make connection strnig dynamic. The user will enter the connection string registration and I'll save it in my local database. And then I will get datas from there with adonet. Is it right way of coding or there is other ways to do this better?

LiHongMSFT-4306 27,881 Reputation points

2024-05-21T02:47:45.0633333+00:00

Hi @Atilla Rüstəmli

If you're using an ORM framework, such as Entity Framework for .NET which provides built-in support for dynamic database connections. It allows you to configure connection parameters through configuration files or code.

2 answers

Bruce (SqlWork.com) 66,061 Reputation points

2024-05-20T20:06:21.26+00:00

the only real issue is security. if the connect string require user and password, then you need to securely store the string. if the connection is integrated, then if the app is a desktop app, no issue, but if website, then the connection will be made with the pool account. a user could enter another users connection string to access their data.
Please sign in to rate this answer.
Atilla Rüstəmli 40 Reputation points

2024-05-20T20:11:37.4466667+00:00

Thanks for answer. But if they have other person's connection string, they only need to find any sql developer or just learn the basics and that is it. They'll get all datas from database.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
SurferOnWww 3,031 Reputation points

2024-05-21T00:39:09.69+00:00

The user will enter the connection string registration and I'll save it in my local database. And then I will get datas from there with adonet. Is it right way of coding or there is other ways to do this better?

I do not think it (i.e., "The user will enter the connection string") is good idea due to security reasons. Why don't you create the user-dependent connection string at the server side?
Please sign in to rate this answer.
Atilla Rüstəmli 40 Reputation points

2024-05-21T13:57:04.57+00:00

Cause I'll get datas from different databases. In use-dependent connection string there is a static con. stirng in appsettings. I need it to be flexible.

Erland Sommarskog 112.7K Reputation points MVP

2024-05-21T20:57:35.3633333+00:00

The important thing here are passwords. If these strings are for integrated security, I'm less nervous. If there are passwords, you really need to think about some encryption mechanism. Storing passwords in plaintext in the database is not OK.

Atilla Rüstəmli 40 Reputation points

2024-05-25T17:16:49.98+00:00

Ok, thank for and advice. I'll be more carefull
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Is it correct to make connection string dynamic?

2 answers

Your answer