Urgent:Prevent download MS Access database from web folder

[Smooth Jazz]

Hello Everyone;

I have this situation. I'm using MS Access as a back-end
database for the website. User will access the website
thru www.abczyx.com/login.asp The database is store
in ../db/zyx.mdb. If the smart user try to type this
www.abczyx.com/db/zyx.mdb he can download the database to
his local computer.

Is there any way to prevent this, I don't want user to
download this database. Even its encrypt, but is there any
way to stop this??? I'm using IIS as a web server.

I'll wait for the reply, and thanks in advance
Regards
Smooth Jazz

 

[Chris Mills]

Sounds like a web issue, securing folders/files from download, not an Access
issue.

BTW, none of MS-Access security is relevant to a web-based back-end, since
access to the BE is controlled by your .asp code, which is the only user of
it, and which the user can't see (an asp only returns display pages).
Therefore, it seems to me nothing like the normal MS-Access security applies.
I think you should forget the Access ng's and ask a web ng, rather quickly I
would imagine.

That's what I think anyhow. I'd be interested if you posted back here what you
found.

 

[Carl]

-----Original Message-----
Sounds like a web issue, securing folders/files from download, not an Access
issue.

BTW, none of MS-Access security is relevant to a web- based back-end, since
access to the BE is controlled by your .asp code, which is the only user of
it, and which the user can't see (an asp only returns display pages).
Therefore, it seems to me nothing like the normal MS- Access security applies.
I think you should forget the Access ng's and ask a web ng, rather quickly I
would imagine.

That's what I think anyhow. I'd be interested if you posted back here what you
found.


You need to put the access database outside of your web

content folder so that it is not accessible by typing the
full url.

Carl