Database Connection String

  • CWE 200

A possible database connection string was discovered on this page. The connection string may include attributes such as the name of the driver, server and database, as well as security information such as user name and password. They are usually read from server-side configuration files or hard-coded into application source code.


It is usually unnecessary for applications to disclose database connection strings to clients. Access to this file or disclosure of this connection string should be restricted.