Ms Access DB used by website

Question

Hi Guys,

I have been asked to update a legacy website.

I was originally build in asp using a MS Access DB to store some user details.

However I am aware that the DB can be downloaded if you use the correct url.

What is the best way to stop this without stopping the website having access to the DB? Thanks Sp

Answer 1

Put the database outside the public html folder. Server side code should still be able to access it.

Answer 2

Put the database outside the website directory, then refer to it by "../../Data/something.db" or setup a DSN entry in the ODBC manager