Welcome to Webhost4life Forum Sign in | Join | Faq

MSSQL

Started by rikmar67 at 07-24-2008 8:13 AM. Topic has 3 replies.

Print Search
Sort Posts:    
   07-24-2008, 8:13 AM
rikmar67 is not online. Last active: 7/24/2008 11:10:46 PM rikmar67

Not Ranked
Joined on 07-24-2008
Posts 1
Secure connection to my own SQL Server
Reply Quote
We are just starting off with WebHost4Life. We have our own in house SQL Server and will not be using the server provided by WebHost4Life. But we need our website to communicate with the server. How can I ensure a secure transmission between the web server and our SQL Server? This will be done through standard ASP pages.

Note: The data that is transmitted itself doesn't necessarily need to be secure. It isn't sensitive data. I just want to make sure that someone can't intercept my connection string with the SQL login and password and then hack my server.
   Report 
   07-28-2008, 5:43 PM
admin is not online. Last active: 10/11/2008 9:15:39 AM admin

Top 10 Posts
Joined on 08-10-2005
Posts 245
Re: Secure connection to my own SQL Server
Reply Quote
The best way is to put a firewall infront of your sql server.  Choose a different port other than 1433 for your sql server.  In your firewall, make sure only your website's IP address can acess to that SQL server IP/Port.

   Report 
   07-30-2008, 5:37 AM
aanodide is not online. Last active: 7/30/2008 8:11:43 PM aanodide

Top 75 Posts
Joined on 07-23-2008
Posts 4
Re: Secure connection to my own SQL Server
Reply Quote
So even though the password will go over the wire, it would take IP spoofing or something to subvert the firewall and make use of it.

That sounds like a good thing.  I didn't know there was firewall functionality.  I guess I have to revisit all the menus.



   Report 
   08-18-2008, 1:20 PM
trebor1952 is not online. Last active: 8/18/2008 9:51:43 PM trebor1952

Top 50 Posts
Joined on 05-15-2006
Posts 6
Re: Secure connection to my own SQL Server
Reply Quote
You can build an aspnet application that would hash the password/connection string and unhash it when it arrives on your local server. This is a little tricky, but it will prevent the sensitive data from getting hacked, if the ip spoofing attack works. Utilize the SSL feature of WBH4L would also be another approach.
   Report 
Webhost4life Fo... » Database Relate... » MSSQL » Secure connection to my own SQL Server

Powered by Community Server, by Telligent Systems