Back

SEC022

Embedded connection string

Object Pascal — Delphi & Free Pascal
Error
Security

Hardcoded connection strings expose server addresses and credentials in source

hardcoded connection strings expose server addresses and credentials in source.

Why this severity

hardcoded connection strings expose server addresses and credentials in source.


Known false positives

example or documentation strings in comments.

Remediation example

ConnStr := Config.ReadString('DB', 'Connection', '');

Reconnecting… Connection lost. Reload