Stripping Out Passwords

I have a page in my ASP.Net application where I show all of my AppSettings, connection strings, etc.  But I didn’t want to show the passwords.  I wanted something like:

server=MyServer;uid=MyUserId;pwd=*******;database=MyDatabase;

So here is the code to strip out the password:

        private string stripPassword(string connString)
        {
            if (string.IsNullOrEmpty(connString))
                return connString;

            int pos = connString.ToLower().IndexOf("pwd");
            if (pos > -1)
                pos += 4;
            else
            {
                pos = connString.ToLower().IndexOf("password");
                if (pos > -1)
                    pos += 9;
                else
                    return connString;
            }

            return connString.Substring(0, pos) + "*******" + 
                connString.Substring(pos + 
                    connString.Substring(pos).IndexOf(";"));
        }

Leave a Comment

Your email address will not be published. Required fields are marked *