A customer was using TDCI’s BuyDesign ChannelSales 8.0 product. They had multiple instances of ChannelSales configured on an application server. Even though the application front end runs on this application ChannelSales uses a database as well on a back end SQL server.

To determine which database is used by ChannelSales and what are the credentials used to connect to SQL we need to locate the connectionStrings.config file. Fortunately (or unfortunately) this file contains the information we need stored in plain text.

The default path for this file is:


You can use Notepad or a similar tool to view the contents.

<?xml version=”1.0″ encoding=”UTF-8″?>
    <add name=”ChannelSalesDB” connectionString=”Database=BuyDesign-ChannelSales80;Server=DB;uid=sa;pwd=password;” providerName=”System.Data.SqlClient”></add>

%d bloggers like this: