| Author |
 Topic  |
|
|
zinpin
Junior Member
Australia
202 Posts |
 Posted - 01 March 2003 : 13:03:25
|
| I'm thinking of password protect the database file, is this doable? |
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 01 March 2003 : 17:29:14
|
| It's doable but of doubtfull value. Any willing hacker will find a easy way to circumvent that, since too many crackers are avalaible online. DO one of two things: place the database in a folder outside your root web folder or change the .mdb file extension to .asp. That will stop anyone from downloading the database. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
 |
|
|
zinpin
Junior Member
Australia
202 Posts |
Posted - 01 March 2003 : 18:19:55
|
| Thanks again ruirib! Ill change the extension to asp. I gather that the only thing I need to change after that then is the config.asp file. Is this correct or are there any other changes to the code? |
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 01 March 2003 : 18:23:13
|
| Yes, you just need to change config.asp. Beware that you'll have to restore the extension to .mdb before trying to open the file in Access, if you ever need to do that. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
zinpin
Junior Member
Australia
202 Posts |
Posted - 01 March 2003 : 18:29:36
|
Yes, no problems there.
Once again Thanks ruirib.  |
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
|
|
sr_erick
Senior Member
USA
1318 Posts |
Posted - 02 March 2003 : 01:58:24
|
| You can do that? Cool..I never knew that...I think thats what I will do. |
Erick
Snowmobile Fanatics
|
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 02 March 2003 : 07:56:34
|
quote:
Originally posted by sr_erick
You can do that? Cool..I never knew that...I think thats what I will do.
Yep and it does stop anyone from downloading the database. The server does not allow .asp files downloads. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 02 March 2003 : 08:32:39
|
Yeah, I had done it but I got only garbled output. At the time I guess I only got a part of the DB with that output and didn't look much further, but I see what you mean. I guess the recommendation of change the name to something weird, besides chaging the extension can overcome that (and the would be hacker would need to guess you were using a .asp extension). Anyway I think your alert is indeed important and what I could recommend is to use that hard to guess name and even encrypting the database, which would make the displayed contents totally garbled, in the even more remote scenario of someone being able to display it.
Anyway I still think the best way to protect a DB is to place it above the root web folder. Besides that, an .asp extension can still be useful, given the additional measures of caution that I covered here. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
zinpin
Junior Member
Australia
202 Posts |
Posted - 02 March 2003 : 08:36:31
|
Ive tried mine and all i get is this:
Active Server Pages error 'ASP 0116'
Missing close of script delimiter
/*****/**********/******/*******.asp, line 13
The Script block lacks the close of script tag (%>).
so i guess in my case the renaming works. well it seems to anyway.
|
|
|
|
GauravBhabu
Advanced Member
4288 Posts |
Posted - 02 March 2003 : 08:37:36
|
| Does compacting work with .asp extension? |
|
|
|
wii
Free ASP Hosts Moderator
Denmark
2632 Posts |
Posted - 02 March 2003 : 09:12:31
|
| Is all the necessary? my host has by default sat all mdb files to "hidden", so they canīt be downloaded, not even with the exact URL and no matter where the mdb file is located. |
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 02 March 2003 : 09:37:54
|
quote:
Originally posted by wii
Is all the necessary? my host has by default sat all mdb files to "hidden", so they canīt be downloaded, not even with the exact URL and no matter where the mdb file is located.
I would say that this is something that should be seen as an alternative when other things, like using a folder above the web root folder, or the strategy used by your host, are not available. In my site my .mdb files are above the root web folder, so I do not change them to .asp. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
Posted - 02 March 2003 : 09:39:10
|
quote:
Originally posted by zinpin
Ive tried mine and all i get is this:
Active Server Pages error 'ASP 0116'
Missing close of script delimiter
/*****/**********/******/*******.asp, line 13
The Script block lacks the close of script tag (%>).
so i guess in my case the renaming works. well it seems to anyway.
Yes I've seen that happen also. |
Snitz 3.4 Readme | Like the support? Support Snitz too |
|
|
|
ruirib
Snitz Forums Admin
Portugal
26364 Posts |
|
| |
Topic |
|
Topic Locked
