How to secure Access Database not using a password

Hi.

I use MS Access as my site database. The MDB file is at a normal directory and can be accessed through the url for example: www.mysite.com/db/users.mdb

My site is reading and writing to this database.

When trying to configure the permissions of the db folder that only I will be able to read/write and anonnymus no the site itself couldn't get to the database for read or write.

Can I secure my MDB file without using a password to the file itself in MS Access Application program?
Can I configure the db folder to have access locally only?


Thanks.

Guy Soffer

 

I thought of a way you can do it but I am not sure how secure it is.

Simply upload the DB to your site but name it databasename.config instead of databasename.mdb

ASP.NET wont allow .config files to be served.

Can anybody think of a security issue caused by this?