The best thing to do is to put the database in a directory that is not accessible via the web. Anything on the same level as your webroot, or above it should work.
This is from the readme.htm file:
quote:Change the database name: When using an Access database, all the data is stored in a single file, unlike the other databases. So caution should be taken in where you store your Access database as it can be downloaded by anyone if they know the path. If you store your Access database in a folder outside of your www folder (or wherever you keep the files for the rest of your site), then you should be safe because no one can download your database if it is outside of your www folder. If you store your database in a cgi-bin folder, or in your www folder, then it is strongly recommended that you change the default database name from snitz_forums_2000.mdb to a cryptic or not easy to guess name. The name should be a combination of letters and numbers. That makes it hard for anyone to guess the name of your database.
Yeah just looked at that so it's just the strConnString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("/snitz_forums_2000.mdb") '## MS Access 2000 using virtual path line would change to strConnString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" & Server.MapPath("/new-database-name.mdb") '## MS Access 2000 using virtual path
Topic Locked
Posted - 24 August 2002 : 05:27:21
