PDA

View Full Version : How to secure Access Database not using a password


bruce
08-20-2003, 10:27 AM
Create a support ticket.

We can make the database folder to not have iis read permission

[b]quote:Originally posted by soguy

Hi.

I use MS Access as my site database. The MDB file is at a normal directory and can be accessed through the url for example: www.mysite.com/db/users.mdb

My site is reading and writing to this database.

When trying to configure the permissions of the db folder that only I will be able to read/write and anonnymus no the site itself couldn't get to the database for read or write.

Can I secure my MDB file without using a password to the file itself in MS Access Application program?
Can I configure the db folder to have access locally only?


Thanks.

Guy Soffer
</blockquote id="quote"></font id="quote">

soguy
08-20-2003, 11:33 AM
Hi.

I use MS Access as my site database. The MDB file is at a normal directory and can be accessed through the url for example: www.mysite.com/db/users.mdb

My site is reading and writing to this database.

When trying to configure the permissions of the db folder that only I will be able to read/write and anonnymus no the site itself couldn't get to the database for read or write.

Can I secure my MDB file without using a password to the file itself in MS Access Application program?
Can I configure the db folder to have access locally only?


Thanks.

Guy Soffer

bsinb03
08-22-2003, 05:20 AM
I thought of a way you can do it but I am not sure how secure it is.

Simply upload the DB to your site but name it databasename.config instead of databasename.mdb

ASP.NET wont allow .config files to be served.

Can anybody think of a security issue caused by this?