Hi yogurtu,

First of all welcome to AO.

1. For the connection string, make sure no passwords are *in* it.
2. For the stored procedure, you can implement your own extened stored procedure
(a dynamic link library actually)which could do a industrial strenght encrytion or decryption
using algorithms like RSA or DES.