config extension is handled by the ASP.NET engine, which returns the This type of page is not served message shown in Figure 1. By default, any HTTP request to a file with the. Since Web.config may contain sensitive data such as connection strings, it is important that the contents of Web.config be kept safe and hidden from unauthorized viewers. Later, in the Master Pages and Site Navigation tutorial, we manually updated Web.config, adding a element indicating that all of the ASP.NET pages in our project should use the DataWebControls Theme. When creating the Northwind Typed DataSet in the first tutorial, for example, connection string information was automatically added to Web.config in the section. Over the course of these tutorials we have updated the Web.config a handful of times. IntroductionĬonfiguration information for ASP.NET applications is commonly stored in an XML file named Web.config. In this tutorial we learn that ASP.NET 2.0 allows us to protect sensitive information by encrypting sections of the Web.config file. By default this file will not be served to a Web site visitor, but an administrator or a hacker may gain access to the Web server's file system and view the contents of the file.

Some of this information is sensitive and warrants protection. An ASP.NET application typically stores configuration information in a Web.config file.

Mvc sql server connection string