problem with password protected DB and ASP

jaberwocky · #1 (**permalink**) 05-25-04, 12:15

Help!

I password protected an ACCESS DB. However now when i try to access any of my .asp pages that link to the database i am getting the following error.

Code:

Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
[Microsoft][ODBC Microsoft Access Driver] Not a valid password.

Obviously it is looking for a password before it accesses my database. Is there anyway around this? I would like to keep my DB password protected, unless someone can suggest some other form of security where i can keep users out of the actual database itself (ie. not able to open it in Access), but still allow them to enter and view data via my asp pages.

ASP-Hosting.ca · #2 (**permalink**) 05-25-04, 13:23

All you need to do is to put your Access database outside of the root folder of your website. This way the database won't be accessible for the users browsing the site.

jaberwocky · #3 (**permalink**) 05-25-04, 13:39

on my server i do have the database outside the root of my website.

I am running IIS on WinXp and have my web pages located at c:\inetpub\wwwroot\databases\mydatabase.mdb

my asp pages are at c:\inetpub\wwwroot\asp\attendance folder

or do you mean to move my DB completely out of the wwwroot...... folder?

ASP-Hosting.ca · #4 (**permalink**) 05-25-04, 15:10

If your Access db is password protected, you can put the password into your connection string and then you'll be able to open your database from your ASP application.

Putting your Access databases outside of the root of your web application, will make the db inaccessible for download for your website visitors.

I hope this helps.

jaberwocky · #5 (**permalink**) 05-25-04, 16:14

OK, i understand the concept, but how would i code in a password below. Sorry my coding abilities are still rather novice. I am using a DSN connection

Code:

<%
Set conn = Server.CreateObject("ADODB.Connection")
    conn.open "attendance2004","",""
    sql = "SELECT [staff].[fullname], [staff].[employeeno] FROM [staff] ORDER BY [staff].[fullname];"    
    Set rs = Server.CreateObject("ADODB.Recordset")    
    rs.Open sql, conn, 3, 3    
%>

I did a search on google for some examples and i found one on ASP101.com, but couldnt get it too work.