Escape quote in web.config connection string

Question

I have a connection string in my web configuration:

<add name="MyConString" connectionString="Server=dbsrv;User ID=myDbUser;Password=somepass"word" providerName="System.Data.SqlClient" /> 

As you can see, the password has a quotation mark (") (given from another department I cannot change this password for db users).

How can I avoid the code in this connection string?

Btw: I already tried and quot; in line. This did not work - ado.net now received an ArgumenException: "The format of the initialization string does not match the specification starting at index 57." 57, where 'is in my connection string. I also tried to include part of the password in' - also did not work.

Also tried "and \" - web.config could not be parsed.

Thanks for the solution:

I had to combine the double quote escaping and put the password in single quotes:

 <add name="MyConString" connectionString="Server=dbsrv;User ID=myDbUser;Password='somepass&quot;word'" providerName="System.Data.SqlClient" /> 

Answer 1

Use " instead of " to avoid it.

web.config is an XML file, so you should use XML escaping.

 connectionString="Server=dbsrv;User ID=myDbUser;Password=somepass"word" 

See this forum.

Update

" should work, but like not, have you tried some other string escape sequences for .NET? \" and "" ?

Update 2:

Try single quotes for connectionString:

 connectionString='Server=dbsrv;User ID=myDbUser;Password=somepass"word' 

Or:

 connectionString='Server=dbsrv;User ID=myDbUser;Password=somepass"word' 

Update 3:

From MSDN (SqlConnection.ConnectionString property):

To include values ​​that contain a semicolon, a single quote character, or a double quote character, the value must be enclosed in double quotation marks. If the value contains both a semicolon and a double quote character, the value can be enclosed in single quotes.

So:

 connectionString="Server=dbsrv;User ID=myDbUser;Password='somepass"word'" 

The problem is not in web.config, but in the connection string format. In the connection string, if you have " in value (key-value pairs), you need to enclose the value in ' . So, while Password=somepass"word does not work, Password='somepass"word' does.

Answer 2

 connectionString="Server=dbsrv;User ID=myDbUser;Password=somepass"word" 

Since web.config is XML, you need to avoid five special characters:

& → & ampersand, U + 0026
< → < left angle bracket, less than a character, U + 003C
> → > bracket with a right angle, the sign is greater, U + 003E
" → " quotation mark, U + 0022
' → ' apostrophe, U + 0027

+ not a problem. I suppose.

Answer 3

if " does not work, then try " .

Answer 4

Use " That should work.