>In my connection string, I have this database this is accessible with no username. How can I make sure that this cannot be done anymore? And, by the same, this would mean that I would have to put a username in there and a password.

You cannot acces SQL Server DB w/o login. It sounds like the connection string configured to use Windows authentication. Can you post it?