Access Error Message Reveals Username and Password . . .

[PracticalProgram]

I have a client using my Access programs and they report that an error produced a message (not necessarily an Access programmed MsgBox) which revealed a full SQL connection string, with the SQL username and password.

This is an obvious security issue. I've attached a copy of what was sent to me.

There is nothing in my programming that would explicitly produce this message.

I've Googled the string "Attachment to SQL Database Failed Err= 3011" which only returned rows if the "Err" was spelled out as "Error". Regardless, none of what I've read mentions this problem of revealing the username and password.

I am almost beginning to think that someone manually created this messagebox as I have not been able to recreate this error and message.

Has anyone seen this kind of a message that parrots the connection string?



Can anyone identify, by the typeface and "theme" (the shape, color, etc.) what version of Access was likely used?

Thank you.

[Welshgasman]

Crossposted https://www.utteraccess.com/topics/2060470?post=unread

[Micron]

@practicalprogram, you should read this to see why you're being called out.
https://www.excelguru.ca/content.php?184

That looks like a built in message to me. When you have linked Access tables and allow people to play in the nav pane they can discover the connection string and password as well (I'm not going to say how) but I will leave this to those who have more experience with SQL server connections. To me it looks like you need to trap that error if possible, perhaps also determining why the back end cannot be found.

That dialogue isn't 2007 or 2016 AFAIC. Perhaps 2010 or 2013.