Using sign (") and sign (') in database connection string

Question

My database(Sql compact edition) password is Y6K<dkq2J)[hf/',@K"!IiQA. When I create it's entity data model connection string in my App config will be:

Edited

<add name="OtherEntities" ... Password=&quot;&quot;Y6K&lt;dkq2J)[hf/',@K&quot;&quot;&quot;&quot;!IiQA&quot;&quot;  ... />

There are quotation sign " and ' in the password,every thing is OK.so i want to use Ado.Net SqCelconnection.

            string pass = "???";
            string conString =
                "Data Source=path\Other.sdf;password='" + pass + "';";
            using (SqlCeConnection connection = new SqlCeConnection(conString))
            {
.

How do I replace " sign and ' sign in password?

I already tried \",\"\"," for " sign.

and '' and ' for ' sign.but doesn't work.

Check Update 3 to the following answer: http://stackoverflow.com/a/3177871/55209 — Artem Koshelev, Dec 10 '12 at 13:13
You have to options. The first use a different password the second use an escape character. — Security Hound, Dec 10 '12 at 13:18

LarsTech · Accepted Answer · 2012-12-10T14:01:36.390

2

You probably have to make the string yourself because of those escape and quote characters within the string.

This seemed to work:

StringBuilder sb = new StringBuilder();
sb.Append(@"Y6K<dkq2J)[hf/',@K");
sb.Append((char)34);
sb.Append("!IiQA");

string conString = @"Data Source=path\Other.sdf;password=" + sb.ToString();

edited Dec 10 '12 at 14:01

answered Dec 10 '12 at 13:36

LarsTech

80,625
14
153
225

Thank you,but `sb.Append(@"Y6K – KF2 Dec 10 '12 at 14:00
1

@irsog Updated for the sake of correctness. Hard password to crack even when looking at it. :-) – LarsTech Dec 10 '12 at 14:02

score 0 · Answer 2 · answered Dec 10 '12 at 13:20

0

Seems you may not be able to have single and double quotation marks in the same connections string.

answered Dec 10 '12 at 13:20

Paul Ruane

37,459
12
63
82

i already read this,i already use this with app.conf no problem,but why can not use ado.net? – KF2 Dec 10 '12 at 13:22
@irsog: in which case try `var pass = "Y6K – Paul Ruane Dec 10 '12 at 13:37

Using sign (") and sign (') in database connection string

2 Answers2