保护Web数据库 [英] Securing Web Database
问题描述
大家好，
我的网站设置有MS-Access DB。网页在ASP中，并且
使用ADO连接到数据库。 DB位于文件夹/数据库中。我
在Global.asa文件中设置了连接字符串。
因为我的虚拟目录是/以及所有文件和文件夹，包括
"数据库"文件夹在文件夹中，所以任何知道数据库
文件夹名称和数据库名称的人都可以直接从
网站下载数据库。
虚拟目录的物理目录是： -
d：\ mywebsite
d：\ mywebsite \database
d：\ mywebsite \DLLs
d：\ mywebsite \ images
d：\ mywebsite \include
d： \ mywebsite\stylesheet
d：\ mywebsite \ _template
如何限制数据库直接从网络访问？请
建议我可以选择的所有替代品。
谢谢
Prabhat
Hi All,
I have a website setup which has MS-Access DB. The web pages are in ASP and
uses ADO to connect to DB. The DB is located in the Folder "/Database". I
have the Connection string setup in the Global.asa file.
As my virtual Directory is "/" and all files and folders including the
"Database" folder are with in the folder so any one who knows the Database
folder name and database name can directly download the database from the
website.
The physical Directory for the virtual directory is: -
d:\mywebsite
d:\mywebsite\database
d:\mywebsite\DLLs
d:\mywebsite\images
d:\mywebsite\include
d:\mywebsite\stylesheet
d:\mywebsite\template
How Can I restrict the database to be access directly from web? Please
suggest all alternatives that I can opt for.
Thanks
Prabhat
推荐答案
将数据库放在d：\ mywebsite上面。
类似于：
d：\\ \\ _databases; \\ mywebsite.mdb
" Prabhat" <无********* @ hotmail.com>在消息中写道
新闻：O3 ************* @ TK2MSFTNGP15.phx.gbl ...
Put the database above d:\mywebsite.
Something like:
d:\databases\mywebsite.mdb
"Prabhat" <no*********@hotmail.com> wrote in message
news:O3*************@TK2MSFTNGP15.phx.gbl...
大家好，
我的网站设置有MS-Access DB。网页使用ASP
并使用ADO连接到DB。 DB位于文件夹/数据库中。我在Global.asa文件中设置了连接字符串。
因为我的虚拟目录是/和所有文件和文件夹，包括
数据库和文件夹位于文件夹中，因此任何知道数据库名称和数据库名称的人都可以直接从
网站下载数据库。
虚拟目录的物理目录是： -
d：\ mywebsite
d：\ mywebsite \database
d：\ mywebsite \DLLs
d：\ mywebsite \\ \\ images
d：\ mywebsite \include
d：\ mywebsite \ quicklesheet
d：\ mywebsite \ _template
如何限制要直接从网络访问的数据库？请
建议我可以选择的所有替代方案。
谢谢
Prabhat
Hi All,
I have a website setup which has MS-Access DB. The web pages are in ASP and uses ADO to connect to DB. The DB is located in the Folder "/Database". I
have the Connection string setup in the Global.asa file.
As my virtual Directory is "/" and all files and folders including the
"Database" folder are with in the folder so any one who knows the Database
folder name and database name can directly download the database from the
website.
The physical Directory for the virtual directory is: -
d:\mywebsite
d:\mywebsite\database
d:\mywebsite\DLLs
d:\mywebsite\images
d:\mywebsite\include
d:\mywebsite\stylesheet
d:\mywebsite\template
How Can I restrict the database to be access directly from web? Please
suggest all alternatives that I can opt for.
Thanks
Prabhat
Prabhat写道：
Prabhat wrote:
如何限制数据库直接从网络访问？请
建议我可以选择的所有替代方案。
How Can I restrict the database to be access directly from web? Please
suggest all alternatives that I can opt for.
最常见，最有效的解决方案是将数据库放在外面
of wwwroot文件夹。没有必要将它放在可以浏览它的网页文件夹中。
-
Microsoft MVP - ASP / ASP.NET
请回复新闻组。我的From
标题中列出的电子邮件帐户是我的垃圾邮件陷阱，因此我不经常检查它。通过发布到新闻组，您将获得更快的回复。
The most common, and most effective, solution is to put the database outside
of the wwwroot folder. There is no need to have it in the web folder where
it can be browsed to.
--
Microsoft MVP -- ASP/ASP.NET
Please reply to the newsgroup. The email account listed in my From
header is my spam trap, so I don''t check it very often. You will get a
quicker response by posting to the newsgroup.
" David Morgan" < MI ********** @ davidmorgan.me.uk>写在
消息新闻：％2 **************** @ TK2MSFTNGP12.phx.gbl ...
"David Morgan" <mi*************************@davidmorgan.me.uk> wrote in
message news:%2****************@TK2MSFTNGP12.phx.gbl...
放入d：\ mywebsite上面的数据库。
d：\ _databases \ mywebsite.mdb
Put the database above d:\mywebsite.
Something like:
d:\databases\mywebsite.mdb
嗨David，
这是否需要Windows / Windows用户的任何安全设置？或者
是否适用于任何设置？
谢谢
Prabhat
Hi David,
Does that require any security settings in Windows / for windows users? Or
will that work with out any settings?
Thanks
Prabhat
这篇关于保护Web数据库的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
