Safety problem about Access Database
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=12514
Printed Date: 11 April 2026 at 1:21pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Safety problem about Access Database
Posted By: westman2
Subject: Safety problem about Access Database
Date Posted: 12 November 2004 at 11:37am
|
Hi, friends there, I have a question about the database safety. I am using Access. If anybody know the path for the database, he can easily download my database. Thus, I am thinking whether anybody can do something to avoid this. I know there is a Chinese forums called DVBBS. In the .mdb file, there is a table called DV_notdownload. To be safe, user needs to rename the .mdb file to .asp. And because of this table in the Access database, it can not be either downloaded or displyed. Any friend can do something similar to this. Because not every server provides a folder above the root directory. Can anybody help? And FYI, here is a smaple. http://www.microe.info/Dvbbs7.mdb - www.microe.info/Dvbbs7.mdb
|
Replies:
Posted By: WebWiz-Bruce
Date Posted: 12 November 2004 at 11:43am
|
Good web hosts always give you a directory to store your access
databases to prevent them from being downloaded, or you could change
the name from .mdb to .asp as you suggest. Web Wiz Forums comes with detailed instructions on how to move and rename the Access database in the install instructions, which is recommended that all Access users should do. It can also be read online at:- http://www.webwiz.net/web_wiz_forums/docs_access_move_db.asp - http://www.webwiz.net/web_wiz_forums/docs_access_move_ db.asp ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: xeerex
Date Posted: 12 November 2004 at 12:21pm
|
Like -borg- said, a good host will always give you a directory ABOVE
ROOT or at least one where download permissions are removed. If you
have any other setup you are just asking for trouble. Note: You certainly can rename the database to .asp, which will help "obfusticate" its location. However, if someone should guess the .asp file and location then all the data will be processed as text and displayed. Granted, it will be hard to decipher but still..... ------------- http://webspacegeeks.com - Need Hosting, Domains, Dedicated Servers? http://www.smartergeek.com - web design | pc support | training | podcasts | video production |
Posted By: dpyers
Date Posted: 12 November 2004 at 3:48pm
|
I used to rename the .mdb to .asp but found that on most (but not all) hosts, it displayed the raw data on some browsers. Better to use .dll, .exe, or don't use an extension at all. Best is to move it out of the web space as previously noted. ------------- 
Lead me not into temptation... I know the short cut, follow me. |