#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Nov 2008
    Posts
    7
    Rep Power
    0

    IIS folder sharing and risk of delete from users.


    I have one question. i have developed a IIS / ASP/ Windows 2003 server/MS Access based a small application in my office. Now i have given users Read / Write access on folder specially .mdb file . But problem is this they can access these files easily and delete them too. how can i handle this situation to restrict them to delete file even i dont want to let them open the source files.
  2. #2
  3. No Profile Picture
    Grumpier old Moderator
    Devshed Supreme Being (6500+ posts)

    Join Date
    Jun 2003
    Posts
    14,424
    Rep Power
    4539
    Just put the .mdb file somewhere that's outside the web space. The db file doesn't have to be in a user-accessible folder.
    ======
    Doug G
    ======
    The man who doesn't read good books has no advantage over the man who can't read them.
    --Mark Twain
  4. #3
  5. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Nov 2008
    Posts
    7
    Rep Power
    0

    what about asp and html files


    But what about ASP and HTML files. I dont want user to open these files. i mean he should not be able to see the code of these file.



    Originally Posted by Doug G
    Just put the .mdb file somewhere that's outside the web space. The db file doesn't have to be in a user-accessible folder.
  6. #4
  7. No Profile Picture
    Grumpier old Moderator
    Devshed Supreme Being (6500+ posts)

    Join Date
    Jun 2003
    Posts
    14,424
    Rep Power
    4539
    Unless your server is terribly mis-configured a user can't view .asp file code.

    HTML source is always visible to the user, that's what the web server sends to the web browser.
    ======
    Doug G
    ======
    The man who doesn't read good books has no advantage over the man who can't read them.
    --Mark Twain
  8. #5
  9. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Nov 2008
    Posts
    7
    Rep Power
    0

    thanks for reply.


    Thanks for reply, I got answer, I was doing something wrong. I have shared the folder which not required to share.



    Originally Posted by Doug G
    Unless your server is terribly mis-configured a user can't view .asp file code.

    HTML source is always visible to the user, that's what the web server sends to the web browser.

IMN logo majestic logo threadwatch logo seochat tools logo