|
| |
|
|
DaveKstl
Posts: 551
Joined: 4/21/2004
Status: offline
 |
Access DB Security - 1/20/2005 15:46:38
I am using MS Access for my db on the server. Is there a security setting that would prevent someone from dowloading the db, opening it and viewing the data while allowing the db to be used via the web site by users?
Thanks
|
|
|
|
dzirkelb1
Posts: 1321
Joined: 10/5/2004
From: Cedar Rapids, Iowa
Status: offline
|
RE: Access DB Security - 1/20/2005 15:51:41
If the database is in the fpdb folder, it is already unable to be downloaded by my understanding...unless specified otherwise.
| |
|
|
|
ou812
Posts: 1611
Joined: 1/5/2002
From: San Diego
Status: online
|
RE: Access DB Security - 1/20/2005 17:15:33
If they know the name of your database they can download it (and I just tried from one of my hosts and it worked) by typing in the url/path/database name. For my sites, I create a different directory and a bit strange database name. This means the intruder needs to know both the directory and database name to get it. Not as easy, but still possible.
_____________________________
-brian
EnterpriseDB: Enterprise-class relational database management system
PostgreSQL: The world's most advanced open source database
| |
|
|
|
DaveKstl
Posts: 551
Joined: 4/21/2004
Status: offline
|
RE: Access DB Security - 1/20/2005 18:39:48
Thanks everyone.
I am going to try the properties and see if that will prevent it.
| |
|
|
|
kt
Posts: 195
Joined: 11/3/2004
Status: offline
|
RE: Access DB Security - 1/26/2005 6:54:15
I have the same question as Dave, because typing in the database URL allowed my database to be downloaded. So I tried your suggestion Spooky of right clicking on the FPDB file in FrontPage and clicking Properties, but the only tab on properties is "General", which doesn't give any options for specifying the folder as non-browsable. Am I missing something??!
Thanks in advance, kt
| |
|
|
|
kt
Posts: 195
Joined: 11/3/2004
Status: offline
|
RE: Access DB Security - 1/26/2005 8:43:07
Thanks for the reply Spooky. On my "General " tab I don't have all those options. I only get "Allow scripts to be run", which is greyed out.
I've been reading some other threads and also the tutorial on subwebs. If this has to do with security settings as you suggest, then I guess I have to have my site open live to change security settings (at the moment I'm publishing on localhost). If I publish live, am I right in thinking that I can then change security permissions, which will in turn provide me with the option to disallow file browsing in the properties of the directory?
If so...
1) do I need to make fpdb a subweb, or can I do it if it's just a folder?
2) will following the steps in this tutorial:
http://www.outfront.net/tutorials_02/fp_techniques/frontpage-subwebs.htm
have the desired effect of allowing me to disallow the file browsing?
Thanks very much again, kt
| |
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts
|
|
|
Printable Version 
k¥ 
