Microsoft IIS
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
 
User Name:
Password:
Remember me
Go Back   ASP Free Forums > System Administration > Microsoft IIS
Reload this Page

Stop Download of mdf file

Discuss Stop Download of mdf file in the Microsoft IIS forum on ASP Free.
Stop Download of mdf file Microsoft IIS forum discussing Internet Information Server general usage, including configuration and server set up. Get the most out of the most popular web server for Windows.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
  #1  
Old August 22nd, 2006, 10:40 AM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
Stop Download of mdf file
I just realized I have a major security risk on my site as I can type in the name of my .mdf file in a browser and it allows me to download it. How do I stop this? Thanks
Reply With Quote
  #2  
Old August 23rd, 2006, 01:20 AM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
  
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 23 h 19 m 36 sec
Reputation Power: 181
Put the file outside of the web.
__________________
======
Doug G
======
I didn't attend the funeral, but I sent a nice letter saying I approved of it. --Mark Twain
Reply With Quote
  #3  
Old August 23rd, 2006, 08:35 AM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
Quote:
Originally Posted by Doug G
Put the file outside of the web.


Thanks for your suggestion. I am considering that but it is a lot of rewrite. I guess I have no choice. Thank you very much.
Reply With Quote
  #4  
Old August 24th, 2006, 01:54 AM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
  
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 23 h 19 m 36 sec
Reputation Power: 181
Why would you need to rewrite anything? Or did you really mean some other file type than a mdf file which is a data file for sql server, and you don't use the actual mdf file location when using sql server in your application code.
Reply With Quote
  #5  
Old August 24th, 2006, 09:05 AM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
Quote:
Originally Posted by Doug G
Why would you need to rewrite anything? Or did you really mean some other file type than a mdf file which is a data file for sql server, and you don't use the actual mdf file location when using sql server in your application code.


It is my access data file and I have to rewrite it's location for the connection string.
Reply With Quote
  #6  
Old August 25th, 2006, 12:41 AM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
  
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 23 h 19 m 36 sec
Reputation Power: 181
There are permission settings that can prevent a web browser from downloading the file, for example Frontpage creates a _private folder you can't get to via a browser. Check with your server admin.
Reply With Quote
  #7  
Old August 25th, 2006, 08:47 AM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
Quote:
Originally Posted by Doug G
There are permission settings that can prevent a web browser from downloading the file, for example Frontpage creates a _private folder you can't get to via a browser. Check with your server admin.


Thank you very much for your help. I am the server admin so can't ask him.... Thanks
Reply With Quote
  #8  
Old August 25th, 2006, 05:51 PM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
I actually meant mdb file. Access file.
Reply With Quote
  #9  
Old August 25th, 2006, 11:41 PM
Doug G Doug G is offline
Grumpier Old Moderator
ASP Free God 11th Plane (10000 - 10499 posts)
  
Join Date: Sep 2003
Posts: 10,143 Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level)Doug G User rank is First Lieutenant (10000 - 20000 Reputation Level) 
Time spent in forums: 3 Weeks 4 Days 23 h 19 m 36 sec
Reputation Power: 181
Set up a folder in your web, and using windows explorer open the properties of the folder. On the web security tab you can allow read access or not to the folder by a web browser.

Or if you have Frontpage you can use a _private folder.
Reply With Quote
  #10  
Old August 26th, 2006, 09:29 AM
Katso Katso is offline
Contributing User
ASP Free Newbie (0 - 499 posts)
  
Join Date: Oct 2005
Posts: 31 Katso User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 8 h 23 m 34 sec
Reputation Power: 4
Quote:
Originally Posted by Doug G
Set up a folder in your web, and using windows explorer open the properties of the folder. On the web security tab you can allow read access or not to the folder by a web browser.

Or if you have Frontpage you can use a _private folder.


I actually turned off read access for the file and changed the error message. Thanks for your help.
Reply With Quote
Reply

Viewing: ASP Free Forums > System Administration > Microsoft IIS > Stop Download of mdf file

« Previous Thread | Next Thread »

Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Linear Mode Linear Mode
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 3 hosted by Hostway. 
Stay green...Green IT