Results 1 to 2 of 2

Thread: file access

  1. #1
    Join Date
    Sep 2002

    Question Unanswered: file access

    ok quick question. i am setting up a website that uses an access database, and am curious if there is a way to prevent a user from guessing the name of the database file or some other than 'asp' file and downloading it. obviously i would not publish the file names but was curious in case someone with nothing better to do wanted to try. what do other sites do?

    im kinda new with this so thanks for the help...

  2. #2
    Join Date
    Feb 2002
    North Wales, UK
    Ususally you place the Access database file 'above' the root folder of the web site so that it is not accessible through the web site using a simple URL, i.e.

    The root folder for is..


    The database file would then be located..


    ASP files cannot be 'downloaded' by the end user although I've noticed a lot of people use the extension '.inc' especially for configuration files - if an end user guesses the name of this file they can download the raw contents of this file.

    Hope this helps.
    J^ - web | email
    newsASP Developer

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts