C:\>CD C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727>
C:\>aspnet_regiis.exe -pef "connectionStrings" C:\projects\venky\WebConfigEncryptDecrypt -prov "DataProtectionConfigurationProvider"
Some userful secure methods to consme in your .Net applications
private bool IsConnectionStringsProtected(string sectionName)
{
Configuration config = System.Web.Configuration.WebConfigurationManager.OpenWebConfiguration(Request.ApplicationPath);
ConfigurationSection section = config.GetSection(sectionName);
if ((section != null) & (section.SectionInformation.IsProtected))
{ return true;} else {return false;}
}
private void ProtectConfiguration(string sectionName, string provider)
{
Configuration config = System.Web.Configuration.WebConfigurationManager.OpenWebConfiguration(Request.ApplicationPath);
ConfigurationSection section = config.GetSection(sectionName);
if ((section != null) & (!section.SectionInformation.IsProtected))
{
section.SectionInformation.ProtectSection(provider);
config.Save();
}
}
private void UnProtectConfiguration(string sectionName)
{Configuration config = System.Web.Configuration.WebConfigurationManager.OpenWebConfiguration(Request.ApplicationPath);
ConfigurationSection section = config.GetSection(sectionName);
if ((section != null) & (section.SectionInformation.IsProtected))
{
section.SectionInformation.UnprotectSection();
config.Save();
}
}
To protect connectionstrings section:
ProtectConfiguration("connectionStrings", "DataProtectionConfigurationProvider");
To protect identity sub section:ProtectConfiguration("system.web/identity", "DataProtectionConfigurationProvider");
To unprotect connectionstrings section:UnProtectConfiguration("connectionStrings");
To unprotect identity sub section:
UnProtectConfiguration("system.web/identity");