0

Does the web application project deployment package has web.config file un encrypted. What is the use of Package. why they say that in web application project only 1 dll is deployed however web.config file is still residing with connection string un encrypted

Shomaail
  • 493
  • 9
  • 30

2 Answers2

2

Your question was not clear from the beginning. Dave answered correctly. The web.config is indeed unencrypted by default, regardless of the project type you use. You could encrypt it using the instructions given in this post or this post which explains how to encrypt and decrypt configuration sections.

Answering to "what is the difference between a web application project over a website project", this MSDN post describes thoroughly the differences between the two project types, including a summary.

I would suggest using a web application project. The most important benefits (in my opinion) when using a web application project are:

  • Building produces a dll. This means that when you publish your application, there is no source code on the server. Be careful: This does not mean that your published code is encrypted. Anybody who has access on the server could see your code using a disassembler (like MSIL Disassembler). If you want to make reverse engineering harder, you could use an obfurscator like confuser.

  • You make debugging easier as the project file contains references to other projects etc. You can also edit and continue while debugging.

  • You have more visual studio options available, regarding build/publish process. You could for example add prebuild/postbuild steps, using MSBuild or Team Build.

Hope I helped.

Pantelis Natsiavas
  • 5,293
  • 5
  • 21
  • 36
1

web.config file is unencrypted by default, but you can encrypt sections of it if needed. See http://msdn.microsoft.com/library/dtkwfdky.aspx for more info.

Dave Mroz
  • 1,509
  • 2
  • 14
  • 27
  • I know we can encrypt it. My question was that: Has the Package in web-application-project (WAP) contains web.config and will it be hiding the information of connection string. If not then what is the benefit of WAP over Website project? – Shomaail Jan 12 '14 at 14:58
  • If you amend your question to ask that, I will post an answer to it. There are many reasons to use a web application project and many reasons why you should avoid a website project. –  Jan 12 '14 at 16:40