终于搞清楚了ADO数据库连接中的Persist Security Info参数的作用
2007-03-23 09:32
316 查看
终于搞清楚了ADO数据库连接中的Persist Security Info参数的作用ADO用了这么久,每次用向导创建ADO的数据库连接字符串时总会有产生一个Persist Security Info属性,平时没太注意,因为设置为True或False时对数据库连接没有任何影响。不过心理还是不爽,今天有时间查询了一下资料,总算搞清楚了它的作用。Persist Security Info属性的意思是表示是否保存安全信息,其实可以简单的理解为"ADO在数据库连接成功后是否保存密码信息",True表示保存,False表示不保存ADO缺省为True
(ADO.net缺省为False,未测试,根据参考资料上说的)具体可以通过ADO的Connect对象的ConnectString属性进行验证,如下所示(以下在Delphi7中测试通过):----------------------------------------------------------------------------------------------------------数据库连接前ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=yzs;Data Source=ydgl22;Persist Security Info=false"数据库连接成功后ConnectString="Provider=MSDAORA.1;User ID=yzs;Data Source=ydgl22"----------------------------------------------------------------------------------------------------------数据库连接前ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=yzs;Data Source=ydgl22;Persist Security Info=true"数据库连接成功后ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=dlyx;Data Source=ydgl22"---------------------------------------------------------------------------------------------------------- 总体来说,如果数据库连接成功后不再需要连接的密码,出于安全性考虑,还是建议将Persist Security Info设为false,以防止后门程序取得数据库连接的密码(windows2003在sp1前就发生过这个问题)。以下是摘自微软的ADO.net资料http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconsecureadonetconnections.asp
----------------------------------------------------------------------转自:http://blog.csdn.net/yzsind/archive/2007/02/11/1507717.aspx
(ADO.net缺省为False,未测试,根据参考资料上说的)具体可以通过ADO的Connect对象的ConnectString属性进行验证,如下所示(以下在Delphi7中测试通过):----------------------------------------------------------------------------------------------------------数据库连接前ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=yzs;Data Source=ydgl22;Persist Security Info=false"数据库连接成功后ConnectString="Provider=MSDAORA.1;User ID=yzs;Data Source=ydgl22"----------------------------------------------------------------------------------------------------------数据库连接前ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=yzs;Data Source=ydgl22;Persist Security Info=true"数据库连接成功后ConnectString="Provider=MSDAORA.1;Password=mypassword;User ID=dlyx;Data Source=ydgl22"---------------------------------------------------------------------------------------------------------- 总体来说,如果数据库连接成功后不再需要连接的密码,出于安全性考虑,还是建议将Persist Security Info设为false,以防止后门程序取得数据库连接的密码(windows2003在sp1前就发生过这个问题)。以下是摘自微软的ADO.net资料http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconsecureadonetconnections.asp
Keep Persist Security Info as False
Setting Persist Security Info to true or yes will allow security-sensitive information, including the userid and password, to be obtained from the connection after the connection has been opened. If you are supplying a userid and password when making a connection, you are most protected if that information is used to open the connection, and then discarded. As a result, your option that helps to provide greater security is to set Persist Security Info to false or no.This is especially important if you are supplying an open connection to an untrusted source or persisting connection information to disk. Keeping Persist Security Info as false helps ensure that the untrusted source does not have access to the security-sensitive information for your connection and also helps ensure that no security-sensitive information is persisted to disk with your connection string information.Persist Security Info is false by default.----------------------------------------------------------------------转自:http://blog.csdn.net/yzsind/archive/2007/02/11/1507717.aspx
相关文章推荐
- 终于搞清楚了ADO数据库连接中的Persist Security Info参数的作用
- ADO数据库连接中的Persist Security Info参数的作用
- ADO数据库连接中的Integrated Security和Persist Security Info参数的作用
- ADO数据库连接中的Persist Security Info参数的作用
- 数据库连接的Persist Security Info参数说明
- Persist Security Info 参数的作用
- Persist Security Info 参数的作用
- Persist Security Info 参数的作用
- Persist Security Info 参数的作用
- Persist Security Info 参数的作用
- .NET连接数据库字符串密码丢失的解决方法(persist security info=true;)
- NET连接数据库字符串密码丢失的解决方法(persist security info=true;)
- .NET连接数据库字符串密码丢失的解决方法(persist security info=true;)
- Persist Security Info参数的作用
- vc使用ADO连接数据库 ADODB中的RecordSet.Open打开记录的两个参数adOpenKeyset、adLockBatchOptimistic的说明:
- Ireport 连接数据库 javabean 使用参数的简单例子
- 使用ADO连接数据库的方法
- ADO.NET的结构,提供程序和数据连接,执行数据库命令Command对象
- ADO.NET连接数据库字符串
- MFC用 ADO连接数据库,get_RecordCount总是返回-1解决办法