Securing Web Database

From: Prabhat (not_a_email_at_hotmail.com)
Date: 11/01/05 

Date: Tue, 1 Nov 2005 21:10:50 +0530

Hi All,

I have a website setup which has MS-Access DB. The web pages are in ASP and
uses ADO to connect to DB. The DB is located in the Folder "/Database". I
have the Connection string setup in the Global.asa file.

As my virtual Directory is "/" and all files and folders including the
"Database" folder are with in the folder so any one who knows the Database
folder name and database name can directly download the database from the
website.

The physical Directory for the virtual directory is: -

d:\mywebsite
d:\mywebsite\database
d:\mywebsite\DLLs
d:\mywebsite\images
d:\mywebsite\include
d:\mywebsite\style***
d:\mywebsite\template

How Can I restrict the database to be access directly from web? Please
suggest all alternatives that I can opt for.

Thanks
Prabhat

Quantcast