how to protect mdb

[Danny]

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess the
path?

Thanks

[Curt_C [MVP]]

simply move it outside the WWW path

--
Curt Christianson
Owner/Lead Developer, DF-Software
Site: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"Danny" <da********@hot mail.com> wrote in message
news:1z******** *************@n ews4.srv.hcvlny .cv.net...

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess the path?

Thanks

[Aaron [SQL Server MVP]]

http://www.aspfaq.com/2454

--
http://www.aspfaq.com/
(Reverse address to reply.)


"Danny" <da********@hot mail.com> wrote in message
news:1z******** *************@n ews4.srv.hcvlny .cv.net...

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess the path?

Thanks

[Steven Burn]

Simple..... stick it outside of the website root.

For example, if your setup is along the lines of;

\htdocs\your_we bsite
\logs
\private

Place the MDB file inside the Private folder. This is out of reach of
internet users, and is still accessible to your applications.

When placing the file outside of the root, you will need to modifiy the path
to something along the lines of;

TheDB = "..\..\Private\ TheDB.mdb"

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!
"Danny" <da********@hot mail.com> wrote in message
news:1z******** *************@n ews4.srv.hcvlny .cv.net...

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess the path?

Thanks

[Evertjan.]

Curt_C [MVP] wrote on 01 jun 2004 in
microsoft.publi c.inetserver.as p.general:

simply move it outside the WWW path

Or make an unguessable directory structure

/dsklfi958340/958kndlzzzz/my.mdb

[and prohibit directory browsing]

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Steven Burn]

Nah, even thats viewable (can't remember their names off hand but, there's a
few programs that allow one to connect directly to a website, and
view/download the file's and folders inside the root).

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!
"Evertjan." <ex************ **@interxnl.net > wrote in message
news:Xn******** ************@19 4.109.133.29...

Curt_C [MVP] wrote on 01 jun 2004 in
microsoft.publi c.inetserver.as p.general:

simply move it outside the WWW path

Or make an unguessable directory structure

/dsklfi958340/958kndlzzzz/my.mdb

[and prohibit directory browsing]

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Egbert Nierop \(MVP for IIS\)]

"Steven Burn" <pv*@noyb.com > wrote in message
news:O2******** ******@TK2MSFTN GP11.phx.gbl...

Nah, even thats viewable (can't remember their names off hand but, there's a few programs that allow one to connect directly to a website, and
view/download the file's and folders inside the root).
Nope,

You mean directory browsing or webdav. Webdav is not so easy by default. You
must enforce non-anonymous access for webdav to be possible.
--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

[Steven Burn]

Not quite no.....

The following isn't the program I was referring to but, it's along the same
lines.

http://www.brothersoft.com/Internet_...ere_18303.html

I'll see if I can find the freeware one again........

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!
"Egbert Nierop (MVP for IIS)" <eg***********@ nospam.invalid> wrote in
message news:Op******** ******@TK2MSFTN GP11.phx.gbl...

"Steven Burn" <pv*@noyb.com > wrote in message
news:O2******** ******@TK2MSFTN GP11.phx.gbl...

Nah, even thats viewable (can't remember their names off hand but,

there's a

few programs that allow one to connect directly to a website, and
view/download the file's and folders inside the root).
Nope,

You mean directory browsing or webdav. Webdav is not so easy by default.

You must enforce non-anonymous access for webdav to be possible.

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

[Danny]

Thanks everybody
i checked and I do not have access to anything other than web folder. I
checked with the ftp program and I cannot go back one directory. I guess I
should talk to web hosting company on that site?

Thanks

"Danny" <da********@hot mail.com> wrote in message
news:1z******** *************@n ews4.srv.hcvlny .cv.net...

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess the path?

Thanks

[Steven Burn]

EEK!..... they've not even given a private folder?.... (no offence but, I'd
be having serious talks with them <g>)

--

Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!
"Danny" <da********@hot mail.com> wrote in message
news:T9******** *************@n ews4.srv.hcvlny .cv.net...

Thanks everybody
i checked and I do not have access to anything other than web folder. I
checked with the ftp program and I cannot go back one directory. I guess I should talk to web hosting company on that site?

Thanks

"Danny" <da********@hot mail.com> wrote in message
news:1z******** *************@n ews4.srv.hcvlny .cv.net...

Hello

how can you protect the .mdb that an asp page modifies?
This must be open to all for modifications right?
But how can it be hidden so people can't just download it if they guess

the

path?

Thanks