About directories and security...

[LarryM]

It's funny that this has not been invented yet, or has it?:

You store your DB outside your default website.
It is accessed only through your ASP code and a ODBC-connection.
This way your DB is not obtainable for the web user.

Why doesn't Any One create a connection corresponding to ODBC, lets call it
FileConnect that in the same way allows us, in a web site, to have directories
and files that are really hidden?

/Larry

 

[dlbjr]

Larry,

If your referring to an Access database, a direct OLE connection will take
away the extra ODBC layer and out perform any ODBC solution.

So consider your solutions wisely.

-dlbjr

invariable unerring alien

 

[LarryM]

Hi Larry,

You already got a response about ODBC from dlbjr, so I won't comment on
that. I believe that many people to protect files from direct http access
by streaming files from somewhere outside of the www realm of the server. I
do that at least in a few sites with some zip files, using a method along
the lines of http://www.aspfaq.com/2161.

Thanks dbjlr and Ray!

Some Newbie-questions:

My website is handled by a Provider who provides an ODBC connection to the DB.
This Provider must specifically give me an OLE DB connection before I can use
it?

The ADO streaming can use Any directory on the Web Server Machine (Physical
Path)? (Of course I can test it myself...but ...if you alreday know..)

/Larry

 

[Ray at]

Some Newbie-questions:

My website is handled by a Provider who provides an ODBC connection to the DB.
This Provider must specifically give me an OLE DB connection before I can use
it?

You should be able to use oledb without getting anything from your host.
Just use a different and appropriate connection string. I don't know what
kind of database you're using, but you can probably find an appropriate
connection string at www.connectionstrings.com.

The ADO streaming can use Any directory on the Web Server Machine (Physical
Path)? (Of course I can test it myself...but ...if you alreday know..)

Any path that IUSR has NTFS permissions to... If this is a shared hosting
plan, you may have your own "IUSR" setup just for your account only with
NTFS permissions to the same directories that you can access via FTP.

Ray at home