PDA

View Full Version : protect .mdb files


mb333
2003-09-25, 09:19 AM
[Win2k3 + Ensim Pro 3.6]

Hello,

To prevent the public from downloading my MS-ACCESS database from the web,
i need to remove HTTP permissions from my /database folder. This ensures
that nobody can use a URL such as "www.mysite.com/database/mydb.mdb" to trigger
a binary download of my database.

So how can i remove HTTP permissions from my /database folder with or without Ensim? or is there any other way to accomplish that ?

thanks.

QT
2003-09-25, 09:51 AM
Originally posted by mb333
[Win2k3 + Ensim Pro 3.6]

Hello,

To prevent the public from downloading my MS-ACCESS database from the web,
i need to remove HTTP permissions from my /database folder. This ensures
that nobody can use a URL such as "www.mysite.com/database/mydb.mdb" to trigger
a binary download of my database.

So how can i remove HTTP permissions from my /database folder with or without Ensim? or is there any other way to accomplish that ?

thanks.

Create a .htaccess in the database directory with the following contents:
<Files ~ ".*\.mdb">
Order Deny,Allow
Deny from all
</Files>

mb333
2003-09-25, 10:04 AM
Hello QT_,

Unfortunately it does not work.

QT
2003-09-25, 10:09 AM
Originally posted by mb333
Hello QT_,

Unfortunately it does not work.

Hrm, sounds like htaccess may not be enabled for that directory. You would need to enable this through Ensim. :)

mb333
2003-09-25, 10:24 AM
Originally posted by QT_
Hrm, sounds like htaccess may not be enabled for that directory. You would need to enable this through Ensim. :)
How can i enable this through Ensim ?

mb333
2003-09-25, 13:11 PM
under my _private directory does the job :rolleyes:

mb333
2003-09-25, 15:07 PM
except i can't write to database :mad: return to beginning :(

mb333
2003-09-25, 23:11 PM
Here is how to do in case someone else need it:

- IIS MMC
- Go to the directory
- Right click + property
- Directory Security tab
- Edit Anonymous access and authentication
- Uncheck Anonymous access