FPDB...how safe is it?

[News4Me]

Hi,

I'm building a website with an Access database,
since i can't seem to figure out how to point to a
DSN ( i got that from my provider) in frontpage,
i'm afraid i'll have to use the folder FPDB and let
frontpage automatically create the 'global.asa'.
It works, i can "FTP" the site from local to my Int.domain.
My question is, How safe or secured is my .mdb file in that
folder? How easy or hard is it for anyone to 'download' the
..mdb file to their harddisc. And if it is "that" easy then does
anbody have any idea how to prevent this.

Thanks in advance for suggestions and idea's

P.S.: Does anyone have any experience with StoreFront for Frontpage. pls let
me know.

Arthur

 

[MD Websunlimited]

Hi,

I would not use the default folder name but rather create a different folder and apply permissions to allow the use of the db within
that folder.

Note: If your ISP / WPP allows for non web tree placement that is the way to go.

 

[News4Me]

Thanx Mike,

I'm not to familiar with applying permissions so i guess i'm stuck with
the FPDB folder then.
Hopefully one fine day there will be an ISP that will support FTP and
FP-serv. extensions at the same time. My goal was actually to edit my
site 'local' with the database already beeing online. BUt hey, guess i can't
have it all.

Thanks again.

 

[clintonG]

The support for ftp and the server extensions has nothing to do with the
hosting provider. It is Microsoft's doing and only Microsoft's doing.
FrontPage always has been and continues to remain crippleware that Microsoft
could have resolved long ago if they genuinely wanted to.

As for StoreFront, I worked with that product for over two years. I can't
say enough to warn you away from LaGarde and generally speaking, anybody who
had or has anything to do with supporting LaGarde as Bob LaGarde is as
dishonest and as unethical as they come. There are many comments and
testimonials that warn about LaGarde's StoreFront that can be found
searching the web and the newsgroups.

<%= Clinton Gallagher
METROmilwaukee (sm) "A Regional Information Service"
NET csgallagher AT metromilwaukee.com
URL http://metromilwaukee.com/
URL http://clintongallagher.metromilwaukee.com/

 

[Curt J Raddatz]

You can have it all. I host web sites that use FTP to upload databases and
audio/video clips and FrontPage (with the extensions) for everything else.
E-mail me directly and I can provide more details. Someone mentioned a very
quick remedy though - right click on fpdb and rename it to something unusal.
Frontpage will fix all the links and the database would be very difficult
for a user to find and download.

 

[Steve Easton]

There are plenty of WPP / hosts that provide both.



--
Steve Easton
Microsoft MVP FrontPage
95isalive
This site is best viewed..................
...............................with a computer

 

[Steve Easton]

The support for ftp and the server extensions has nothing to do with the
hosting provider. It is Microsoft's doing and only Microsoft's doing.

How do you figure. It's a matter of whether the hosting provider is
competent enough to install the extensions
and / or create an extended web account.


--
Steve Easton
Microsoft MVP FrontPage
95isalive
This site is best viewed..................
...............................with a computer

 

[News4Me]

Thnx to all for replying,
I'm now considering moving to another ISP, I "simply" need to be hosted
on a windows200X server (i guess).
I would like to edit my website "live" and connect to my database whenever
i need to. using a DSN that is or Connstring that i can input in frontpage.
Now using the FPDB thing and need upload the complete database with FTP
whenever something
changes. So after all the replies i cam to the point i should switch ISP.
Thanks again to all.

 

[clintonG]

Anybody that really cares to determine the facts should in fact corroborate
what I've stated in this context. The web and the newsgroups have dozens of
articles and postings discussing the perpetually buggy and insecure
FrontPage Server Extensions and the problems people have had with them.

<%= Clinton Gallagher
METROmilwaukee (sm) "A Regional Information Service"
NET csgallagher AT metromilwaukee.com
URL http://metromilwaukee.com/
URL http://clintongallagher.metromilwaukee.com/

 

[Kevin Spencer]

Anybody that really cares to determine the facts should in fact

corroborate what I've stated in this context. The web and the newsgroups
have dozens of articles and postings discussing the perpetually buggy and
insecure FrontPage Server Extensions and the problems people have had with
them.

Well, as Jimi Hendrix once said so well, "You can't believe everything you
see and hear, can you?"

--
;-),

Kevin Spencer
Microsoft MVP
..Net Developer
Paranoia is just a state of mind.

 

[clintonG]

Not much from the FrontPage MVPs in this newsgroup or their supporters no.

<%= Clinton Gallagher

 

[Rob Giordano \(Crash\)]

Why arent they secure? I too have heard this many times but no one has ever
explained it. And, I'm not trying to provoke a nutso crazy argument..I just
wanna know.

I've been using fp extended webs both on linux/unix and windows servers
since the Vermeer days and have never had a problem with the extensions -
unless it was something I did to wack them out...but all easily explained
and repaired.

 

[Tom Pepper Willett]

I think it's rather ironic to receive a response like this from you, who has
been arrested, convicted, and fined in the state of Wisconsin for so many
issues, and who owes over $8,000 in back taxes to the government.

Your credibility is truly suspect.

but, many people in many newsgroups already know that.

Tom
| Not much from the FrontPage MVPs in this newsgroup or their supporters no.
|
| <%= Clinton Gallagher
|
| | >> Anybody that really cares to determine the facts should in fact
| >> corroborate what I've stated in this context. The web and the
newsgroups
| >> have dozens of articles and postings discussing the perpetually buggy
and
| >> insecure FrontPage Server Extensions and the problems people have had
| >> with them.
| >
| > Well, as Jimi Hendrix once said so well, "You can't believe everything
you
| > see and hear, can you?"
| >
| > --
| > ;-),
| >
| > Kevin Spencer
| > Microsoft MVP
| > .Net Developer
| > Paranoia is just a state of mind.
| >
message
| > | >> Anybody that really cares to determine the facts should in fact
| >> corroborate what I've stated in this context. The web and the
newsgroups
| >> have dozens of articles and postings discussing the perpetually buggy
and
| >> insecure FrontPage Server Extensions and the problems people have had
| >> with them.
| >>
| >> <%= Clinton Gallagher
| >> METROmilwaukee (sm) "A Regional Information Service"
| >> NET csgallagher AT metromilwaukee.com
| >> URL http://metromilwaukee.com/
| >> URL http://clintongallagher.metromilwaukee.com/
| >>
| >>
| >> | >>>
| >>> message | >>>> The support for ftp and the server extensions has nothing to do with
| >>> the
| >>>> hosting provider. It is Microsoft's doing and only Microsoft's doing.
| >>>
| >>> How do you figure. It's a matter of whether the hosting provider is
| >>> competent enough to install the extensions
| >>> and / or create an extended web account.
| >>>
| >>>
| >>> --
| >>> Steve Easton
| >>> Microsoft MVP FrontPage
| >>> 95isalive
| >>> This site is best viewed..................
| >>> ..............................with a computer
| >>>
| >>>
| >>
| >>
| >
| >
|
|

 

[clintonG]

Willet You were a low life punk and a liar when you were trying to pimp
niave merchants trying to use the StoreFront shopping cart and you're still
a low life punk and a liar who knows nothing about the circumstances you are
talking about.

<%= Clinton Gallagher
METROmilwaukee (sm) "A Regional Information Service"
NET csgallagher AT metromilwaukee.com
URL http://metromilwaukee.com/
URL http://clintongallagher.metromilwaukee.com/

 

[clintonG]

Since everybody knows a dangerous criminal like me cannot be trusted let's
see what Microsoft has to say...

google: frontpage server extensions knowledgebase security

The very first hit and many that follow document the problems everybody has
had with the server extensions.

<%= Clinton Gallagher
METROmilwaukee (sm) "A Regional Information Service"
NET csgallagher AT metromilwaukee.com
URL http://metromilwaukee.com/
URL http://clintongallagher.metromilwaukee.com/

 

[Rob Giordano \(Crash\)]

Welp, this is just as curious...a Google on
Frontpage security issues yields 606,000 results
Apache security issues yields 2,350,000 results
and
Linux security issues yields a whopping 15,100,000 results.

The very first hit that you spoke about was an old warning with an update
from 2004. The others all seemed to regard patches...I would think a patch
is a good thing.

And...dunno nuttin' about you being a dangerous criminal...nor do I care.

I'm still curious what, in laymans terms, are the real security issues with
fpse's.

 

[Kevin Spencer]

Ever since the advent of the Internet, security has been an issue with every
software manufacturer that writes Internet-centric software. A contentious
person could certainly make an argument for or against any software
manufacturer or Internet-centric software based on this fact. Of course,
only a contentious person would derive any pleasure from arguing about it.
There is no true profit to such arguments. But some dogs do indeed seem to
enjoy chasing their own tales.

--
HTH,

Kevin Spencer
Microsoft MVP
..Net Developer
Paranoia is just a state of mind.

 

[Rob Giordano \(Crash\)]

Welp...all's I'd like to do is get someone that claims this to point to
something specific that hasn't been patched or repaired...and no one has
been able to...let alone in plain language.

 

[clintonG]

My last word on this subject recalls that which was spoken as plain as it
gets...

"If a man will begin with certainties, he shall end in doubts; but if he
will be content to begin with doubts he shall end in certainties." ---- Sir
Francis Bacon


<%= Clinton Gallagher
METROmilwaukee (sm) "A Regional Information Service"
NET csgallagher AT metromilwaukee.com
URL http://metromilwaukee.com/
URL http://clintongallagher.metromilwaukee.com/

 

[JIMCO Software]

My last word on this subject recalls that which was spoken as plain
as it gets...

"If a man will begin with certainties, he shall end in doubts; but if
he will be content to begin with doubts he shall end in certainties."
---- Sir Francis Bacon

If I answered technical questions as dodgy as you do, I'd be out of work!


Here's one I like:

"If a man makes a claim against another, he shall substantiate that claim
with certainties."
---- Jim Cheshire

--
Jim Cheshire
JIMCO Software
http://www.jimcosoftware.com

FrontPage add-ins for FrontPage 2000 - 2003