syntax or permission problem?

Discussion in 'Hosting Services / Control Panel' started by johnabrown, May 17, 2006.

Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.
  1. I am new to web design. There are a lot of things I do not understand. I?ll limit this question to permissions of folders.
    </o:p>
    One of the purposes of our website is to allow our customers to download our software. We have a file named setup.exe that installs our software. Lets say my web address is wehavebetterthings.com. The folder I see when I use cuteFTP is (foldericon) /wehavebette. Subfolders include /stats, /errors, /cgi_bin, /bin, and /_database. When I look in the control panel at permissions I see that the default settings are for anonymous to have read and write permissions to all folders except /stats where both read and write are denied. I have a html file named Contact.html that contains the following line:
    </o:p>
    <a href="setup.exe">Download </a> (this works)
    </o:p>
    If I click on Download, I am prompted to open or save and I can browse as to where I want the downloaded file setup.exe to go.
    </o:p>
    If I change the line to either of the following:
    <a href="_database\setup.exe">Download </a> ?(does not work)
    <a href="\_database\setup.exe">Download </a> ?(does not work)
    </o:p>
    (There is a copy of setup.exe in /wehavebette/_database)
    </o:p>
    It gives me the following error
    The page cannot be displayed ?? HTTP Error 403.2 ? Forbidden: Read Access is denied.
    </o:p>
    Have I coded it incorrectly or is there some part of the permissions that is causing the problem? Where can I find resources that will help me understand permissions, security, and where I should store which files?
    </o:p>
    Thanks, John Brown
     
  2. I found the specific answer to why the download does not work.

    "For account set up after 8/25/2003, you should see a directory named "_database" under your webroot. The _database directory is configured with enhanced security which disallow direct download from a web browser. For security reason, all MS Access database files (*.mdb) should be uploaded to this directory."

    This quote is from KnowledgeBase FAQ

    I would still like to know where I can find resources for this subject.

    John Brown
     
  3. Bruce

    Bruce DiscountASP.NET Staff

    What resource are you looking for?

    Any files within the _database directory is not downloadble.

    Bruce

    DiscountASP.NET
    www.DiscountASP.NET
     
  4. Documentation that would tell me that any file in the _database directory is blocked from downloading with a browser. Documentation that would tell me where I should store particular files and what restrictions are in that directory. Stuff like that.


    Thanks, John Brown
     
  5. By trial and error I have found that the \bin subdirectory also has the download restriction. If I create a new subdirectory under the main directory, say I name it \dirX, it does not have the download restriction. So now I have learned, by trial and error, that there are three properties for a directory: Read, Write, Download.


    \webroot (main directory) Read-Yes, Write-Yes, Download-Yes


    \webroot\dirX Read-Yes, Write-Yes, Download-Yes


    \webroot\_databaseRead-Yes, Write-Yes, Download-No


    \webroot\bin Read-Yes, Write-Yes, Download-No



    \webroot\stats Read-No, Write-No, Download-No


    I'm looking for resources or documentation that will help me understand these properties of directories and in which directory it is best to store what files. Possibly there is no such documentation. I'm just trying to learn.


    Thanks, John
     
  6. Bruce

    Bruce DiscountASP.NET Staff

    These are the directories that have special permission setting

    -- _database - No Read/Write

    This directory is created by our server setup

    -- bin directory - No Read/Write

    This directory is intended for storing ASP.NET compiled dlls. IIS is hardcoded to block access to the bin directory.

    -- App_* - No Read/Write

    This only apply if your site is configured to use ASP.NET 2.0. IIS is hardcoded to block access to these directories.

    Bruce

    DiscountASP.NET
    www.DiscountASP.NET
     
Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.

Share This Page