web.config DB Connection String

Can anyone tell me the pros and cons of storing a database connection string in the web.config file
In relation to security
Thanks

I dont think there are any. The only way someone could see the web.config is if they get access to your files, and the same for putting it in a sesion variable being set in an aspx page.

That's what I was thinking, so if a malicous user can see the file contents your pretty much up *****s creek already.