Deploy windows form c# with local database

Question

Hello i have finished developing a c# code for a software and it is time to make a setup for it ( using Setup and Deployment project of visual studio ) and publish it to the users to install and use the software. this software uses files of DLLs database files (mdfldf) and some other (.exe .exe.config .exe.manifest and .pdb)... in the setup project of this software i need to put the required files to be installed on users pc... so i put all the files in debug folder (or release folder including database files mdf and ldf)... the problem is that anyone who has installed this application can see my MDF and LDF database files and can easily attach it to a sql server and find out how my tables were designed and what are my records. Please help me with these questions that i need the most : 1)how could i prevent users from seeing these source files? 2)is this way of publishing (put every thing in debug or release folder for installation of end user) correct? 3)should i directly put MDF and LDF files or have to do a some work of securing them like compiling into irreversible format that only application can use it not anyone else? 4)should i do something in the process of creation of database in visual studio to prevent any one accessing it except software itself? 5)am i missing a concept in the way of publishing an application with local database? P.S: application is developed by C# windows form using visual studio .net 2013 (.NET 4.5) Setup project is used by Setup and Deployment of visual studio Application is using local database by visual studio This is my first time of publishing an actual software sorry for any lack of information Thanks for your help

Vinay Singh · Answer

Hi check the answers of your question 1)how could i prevent users from seeing these source files? Ans: Try the below tool to prevent the block decompilation of dll http://arunendapally.com/post/protect-your-source-code-from-decompiling-or-reverse-engineering 2)is this way of publishing (put every thing in debug or release folder for installation of end user) correct? Ans: After making the setup you don't need to do any thing but only on that case if you have included all the component like third party dll images your local database etc while making setup. 3)should i directly put MDF and LDF files or have to do a some work of securing them like compiling into irreversible format that only application can use it not anyone else?? Ans: yes either simply put the MDF file in a secure place or keep it with project but make it password protected. 4)should i do something in the process of creation of database in visual studio to prevent any one accessing it except software itself? Yes just by making your DB password protected and always put password in your app.config in encrypted. 5)am i missing a concept in the way of publishing an application with local database? No you have done in a right way I hope this information will help you.

theLizard · Answer

@Karthik I don't think your suggestion applies to windows forms app it is for web site only Salar said his app is windows forms. Salar asked - how could i prevent users from seeing these source files? Use a different programming language like C++ eg C++ Builder I do not use C# for windows forms apps for this reason. I use C++ Builder Rad Studio it compiles applications into a single exe with no need to deploy DLL's I use INNO setup for creating installation files I also use SQLite a lot for it's simple implementation and I use SQliteExpert for database tool. See some examples here. http://bcbhelper.com/Downloads.aspx

Karthik Elumalai · Answer

Hi salar KZ Hope the below link will help for some of your problem http://www.c-sharpcorner.com/blogs/convert-code-behind-files-or-class-files-into-one-dll-file-in-visual-studio Note : mainly for the question: 1)how could i prevent users from seeing these source files? #if you make a pacakage  as mentioned in the above linkit will surely avoid of seeing the source files by client by converting all the source files into one common dll which is enough to host the application. kindly let me know your thoughts. thanks karthik

Nitin Sontakke · Answer

If you are not using anything complex other than basic database engine try looking into LocalDB solution. It also comes with .msi file installation option and doesn't really require SQL Server installation. Furthermore you should files from Release folder and not the Debug folder. You shouldn't deploy .pdb files. I am aware that I only partly answering your question.

salar kz · Answer

Thanks every one for ur great answers Chose Vinay's answer coz it was more in detail

salar kz · Answer

Thanks for ur reply yes it is a simple db and behaves more like a text file of data most complex thing about it is using stored procedures.