|
 |
access_asp thread: Secure Access XP
Message #1 by "Jon Ege Ronnenberg" <007-is-his-iq@o...> on Thu, 19 Dec 2002 15:56:17
|
|
How do I set up the security in Access XP in DSNless environment? I?ve
tried setting a password in Access but when I call it from my ASP page
like this
<code>
Set objConn = Server.CreateObject(?ADODB.Connection?)
objConn.Open ?Provider=Microsoft.Jet.OLEDB.4.0: ? & _
?Data Source= C:\datastores\infratel.mdb;?
?User Id=; Password=iH73Jesj32;?
</code>
I get a conflict error but I know that access is closed?
Any help or thoughts would be nice, thanks in advance - Jon
Message #2 by "Ken Schaefer" <ken@a...> on Fri, 20 Dec 2002 11:11:29 +1100
|
|
What are you trying to secure Access against?
Cheers
Ken
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Jon Ege Ronnenberg" <007-is-his-iq@o...>
Subject: [access_asp] Secure Access XP
: How do I set up the security in Access XP in DSNless environment? I?ve
: tried setting a password in Access but when I call it from my ASP page
: like this
: <code>
: Set objConn = Server.CreateObject(?ADODB.Connection?)
: objConn.Open ?Provider=Microsoft.Jet.OLEDB.4.0: ? & _
: ?Data Source= C:\datastores\infratel.mdb;?
: ?User Id=; Password=iH73Jesj32;?
: </code>
: I get a conflict error but I know that access is closed?
: Any help or thoughts would be nice, thanks in advance - Jon
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Message #3 by "Jon Ege Ronnenberg" <007-is-his-iq@o...> on Fri, 20 Dec 2002 11:10:09
|
|
Against downloads, hackers, overload, misuse, datalost you name it...
I figure that I'm protected against downloads if I place the db outside
the virtual directery. But I can't figure out how to do it in a dsnless
way. Maybe I'm just gonna have to do it with a DSN containing pw and
userid. But it won't stop a hacker from open the db if he can download it,
will it?
> What are you trying to secure Access against?
Cheers
Ken
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Jon Ege Ronnenberg" <007-is-his-iq@o...>
Message #4 by "Ken Schaefer" <ken@a...> on Sat, 21 Dec 2002 23:17:39 +1100
|
|
Options:
a) Place the database file outside the webroot. You will need your hosting
company (or systems administrator) to give you the actual path -or- create a
DSN for you that points to the file
b) Remove the IIS "read" permission from a folder. This way files can't be
downloaded by typing in the URL. You can do this in the IIS MMC Snapin (or
perhaps in the tools that your hosting provider gives you).
c) Some hosting companies provide a special, pre-configured folder for you
to place your database in. See if they offer something like this.
Cheers
Ken
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From: "Jon Ege Ronnenberg" <007-is-his-iq@o...>
Subject: [access_asp] Re: Secure Access XP
: Against downloads, hackers, overload, misuse, datalost you name it...
:
: I figure that I'm protected against downloads if I place the db outside
: the virtual directery. But I can't figure out how to do it in a dsnless
: way. Maybe I'm just gonna have to do it with a DSN containing pw and
: userid. But it won't stop a hacker from open the db if he can download it,
: will it?
: > What are you trying to secure Access against?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
 |