MsAccess_ Unsecured _Urgent
Hii


we are using win2003 with ensim
if we put my access db file in wwwroot which is my main folder where we put our index file..every one can access or download through the url .like

www.mysite.com/db/db.mdb

if we put db file outside the wwwroot folder then we are unable to set dsn

we are using this path in dsn creation on ensim site administrator

Inetpub/db.mdb


plz help us


waiting for your reply

Thanx in advance

are you sure that you have put db.mdb in Inetpub folder? or Inetpub/some folder here/db.mdb?

Just use the Admin-ODBC wizard in the Windows 2003 to setup. Do not need to use Ensim for this.

Hi


I m using this control panel...

now u can have idea of my problem


http://www.ensim.com/Products/Pro/demos/wp36/site_admin/login.htm



Thanx 4 replying

There's two ways I can think of around this :

1) rename the databse file from database.mdb to database.asp - and change your connection string to suit. Sounds weird but works fine anyone attempting to download the database via a URL IIS will try to run it as an .asp script and fail.

2) Better answer - go into IIS, go to the relevant site, find the database file and remove IIS read permissions (tick box) - URL's will no longer work.

Dun tell me this is the default setting of Ensim? U better highlight to them and get a patch, database directory shd not be visible in WWW, For Hosting Controller they have 4 separate directories, WWW, Special , Log and Database, only the WWW directory is visible. This structure is much safer.

Originally posted by tulip4heaven
if we put db file outside the wwwroot folder then we are unable to set dsn


Why? Just go to your Windows server, and change the DSN path for the DB. It can point to anywhere.

Yeap just change the DSN path in Windows, but just curious by default Ensim DB is inside the WWWroot?