Yuda
05-23-2004, 03:48 AM
Hi,
I saw in past postings here that the DB security is handled by putting the DB file (MS Access) in the DB folder which should be secured in terms that you need a password to get in.
However, I would like to know if there is a way to prevent directory browsing from the other directories on the site. If for example a user knows or guess the directory structure he can easily access all other directories in a way that he can rip the whole site or significant part of it, like the images directory ( except from the DB).
I tried to prevent access by password protecting the directories but it caused a denial of access to that directory for any one including from within the application itself.
I am not proficient with that stuff so if my post is totally nonsense please bear with me. In any case I'll appreciate any input about this issue.
Regards,
Yuda.
I saw in past postings here that the DB security is handled by putting the DB file (MS Access) in the DB folder which should be secured in terms that you need a password to get in.
However, I would like to know if there is a way to prevent directory browsing from the other directories on the site. If for example a user knows or guess the directory structure he can easily access all other directories in a way that he can rip the whole site or significant part of it, like the images directory ( except from the DB).
I tried to prevent access by password protecting the directories but it caused a denial of access to that directory for any one including from within the application itself.
I am not proficient with that stuff so if my post is totally nonsense please bear with me. In any case I'll appreciate any input about this issue.
Regards,
Yuda.