Bernard,

Sorry it took awhile for me to get back to you. I'm leaving for a nice long vacation in 2 days and I've got a lot to get done before that.

Anyway, if you don't want to put id and password in your config file, you can use a Trusted Connection (assuming that your SQL Server is set up for that). So, your connection string would be:

  <appSettings>
    <add key="ConnectionString" value="server=(local);database=MyDatabase;trusted_connection=true;" />
  </appSettings>

~~Bonnie


>Hi
>
>Again, thanks for the reply..
>
>I think you are correct when you say I don't want to hard code the connection string into the application. I think I'm over engineering this one !
>
>If I was to store my user logon information, user id and passwords etc, in a config file wouldn't this allow anybody to view this information ? Wouldn't this lead to a security problem ?
>
>Do you know the standard approach to address this issue? If it is an issue...
>
>Thanks for the help. Bernard...