encryption - Encrypting connectionStrings in classic ASP -

i'm looking way increase security on older web apps. have connection strings saved in plain text in include.asp file. ideally thinking of moving these web.config file , encrypting using aspnet_regiis.exe, not work classic asp.

i've had around internet cannot find seems fit specifically, has run same issue before?

the best way protect include.asp use anonymous authentication on site , sure set ntlm security of file can read user used iis.

if not possible can obfuscate string in number of ways none secure, can avoid these strings being seen casual nosy user not hacker.

• you can use own crypt , decrypt function, visible in .asp files, see here , here examples

• you can use external crypt , encrypt tool run .asp (i use run ruby script , results, replace command executed yours)

  set objwshell = createobject("wscript.shell")  set objcmd = objwshell.exec("cmd.exe /c c:\ruby193\bin\ruby.exe d:\inetpub\site\appl\rmw\import\import.rb") result = objcmd.stdout.readall() errors = objcmd.stderr.readall()  set objcmd = nothing set objwshell = nothing  

• you use windows script encoder if os supports it, see