Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 3 of 3
  1. #1
    New to the CF scene
    Join Date
    Jul 2002
    Posts
    6
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Question ASP.NET and ACCESS

    I'm writing a website using ASP.NET and the website uses an access database file. This database file contains password information, and i just found out that if someone found out the name of the access file, they can directly download it by simply entering it in the url.

    for example:

    www.example.com/data/myDatabase.mdb

    and IE will automatically download the file. How do I prevent that from happening?

    Thank You

  • #2
    Rockstar Coder
    Join Date
    Jun 2002
    Location
    USA
    Posts
    9,074
    Thanks
    1
    Thanked 328 Times in 324 Posts
    Well the easiest way for you to do it without having access to the web server is to open your database up in Access and password protect it. So then you have to enter a password to open it up in Access.

    So if someone does figure the name of your database, and they do download it, they can't view whats in it.

    Also name the database something other than like 'users' or 'database'; go for something difficult for someone to guess.
    OracleGuy

  • #3
    Registered User
    Join Date
    Jun 2002
    Location
    Arizona
    Posts
    175
    Thanks
    0
    Thanked 0 Times in 0 Posts
    sitename.database.databasename.mdb :-D no one would guess something like that.


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •