When you do response.write strConn what does it give you?

I would not recommend keeping the user "sa" and certainly not with a
blank password or you are making your server very very likely to be
attacked.

One of the recommended steps to secure a SQL Server is to get rid of the
"sa" user or at least to give it a callifragilistic password.

I would create a SQL server user (no NT authentication) and give it the
roles public, db_datareader and db_datawrite for the database only, and,
in the database properties, deactivate all the permissions to create and
backup.

Place your connection string in a location that cannot be opened easily,
like a different folder, and open it via an include to a virtual path.
This makes you sure that, if somebody hacks into the root folder via
FTP, they will not be able to find your connection string. 

strConn = "Provider=SQLOLEDB.1;" & _
        "Data Source={Server};" & _
        "Initial Catalog={Database};" & _
        "User ID={Login};" & _
        "Password={Password};" & _
        "Persist Security Info=True;"

-----Original Message-----
From: Babiker [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, August 01, 2002 3:26 PM
To: ActiveServerPages
Subject: Connection string to Sql server 2000


I GET THE ERROR WHEN I CONNECT TO SQL SERVER 2000

Microsoft OLE DB Provider for SQL Server error '80004005' 

Login failed for user 'sa'. Reason: Not associated with a trusted SQL
Server connection.

here is the connection string

strConn = "Provider=SQLOLEDB; Data Source=" & _
            Request.ServerVariables("NETXPLOR-VOIP") & _
            "; Initial Catalog=TfXpressDB; User ID=sa; Password="

do i need to set some thing .
this connection string was working fine in sql server 7

PLEASE HELP

thaks

---
You are currently subscribed to activeserverpages as:
[EMAIL PROTECTED] To unsubscribe send a blank email to
%%email.unsub%%


---
You are currently subscribed to activeserverpages as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to