Since .net framework have a similar idea with Java. THe program will be complier into MSIL (like byte code like byte code in Java). So the program that written by .net language can be decomplie. Just like Java program. Therefore the string parameter fofr the login to server and database can be retrieve by the decomplier if it is exits. Then the security will be easy to break down?