Stripping Out Passwords

I have a page in my ASP.Net application where I show all of my AppSettings, connection strings, etc.  But I didn’t want to show the passwords.  I wanted something like:

server=MyServer;uid=MyUserId;pwd=*******;database=MyDatabase;

So here is the code to strip out the password:

 

 

        private string stripPassword(string connString)

        {

            if (string.IsNullOrEmpty(connString))

                return connString;

 

            int pos = connString.ToLower().IndexOf("pwd");

            if (pos > -1)

                pos += 4;

            else

            {

                pos = connString.ToLower().IndexOf("password");

                if (pos > -1)

                    pos += 9;

                else

                    return connString;

            }

 

            return connString.Substring(0, pos) + "*******" + 

                connString.Substring(pos + connString.Substring(pos).IndexOf(";"));

        }

 

Leave a Comment

Your email address will not be published. Required fields are marked *