title: ASP.Net Web Application - Is there a best practice method for where to keep connection strings?
body: <p>Actual question: Is it considered best practice to store clear text connection strings in a web.config file in an ASP.Net web application?</p>
  
  <p>Background:<br>
  Currently developing a web application which I want to be able to install on different sites (where I will only have plain text editing). The application requires a number of different connection strings (which will obviously be different depending on which site the app is deployed on) so I want to be able to store all the connection strings (with usernames and passwords) in the web.config.</p>