Here's a list of commonly used methods, and you can mix several ways, such as Hksha#21dsi$jhhsd.asa, plus an antivirus table in the system Access database, to prevent Access databases from being downloaded.
First, change the name of the database
Open your extracted Web site system directory, select the "database" directory in the Newasp.asa (DB file), right-click Select "Rename", change to a name such as Newasp#webdata.asa to prevent others to download (this is very important!).
Ii. Modify the database link address of the conn.asp file
Open your Web Site system directory, locate the conn.asp file in the root directory, and open the file in Notepad. Define the database category "Const issqldatabase = 0", 1 is the SQL database, and 0 is an Access database.
Then find the db= "Databasenewasp.asa" code, change the Databasenewasp.asa database address to the root root relative path relative to the site, and change the database name to the name you modified. Please note: Start with "", or use physical path, such as: db= "F:inetpubwwwrootdatabasenewasp.asa". There are comments in the file
If you use a physical path, delete or comment out the statement "CONNSTR =" Provider=Microsoft.Jet.OLEDB.4.0;Data source= "& Server.MapPath (DB)" to enable "' ConnStr = "Provider=Microsoft.Jet.OLEDB.4.0;Data source=" & DB ", remove the previous annotation, which is the single quote" ' ".
Database parameters setting the root relative path of the Web site description:
If the test address is:/index.asp
Then the database path is Databasennewasp.asa
If the test address is:/ab/cde/index.asp
Then the database path is Abcdedatabasenewasp.asa
Several ways to modify ACCESS database security:
1. Change the name of the database. This is a common method of changing the database name to a weird name or long name in case someone else guesses. If it is guessed that the database name can also download the database file, but the probability is not. Such as: Change the database database.mdb to fjds$^&ijjkgf.mdb this name.
2. Change database suffix name. If changed to Database.aspdatabase.asadatabase.incdatabase.cgidatabase.dll and so on, please note that the file to which you want to set these suffixes in IIS cannot be resolved.
3. The conversion of database Database.mdb to #database.mdb is the simplest and most effective approach. Suppose someone gets your database address is: http://www.yourserver.com/folder/but actually gets to be: http://www.yourserver.com/folder/, because # here plays the role of a discontinuity. The address string encounters the # number and automatically considers the access address string to end. Attention: Do not set directory accessible. In this way, no matter what other tools can be used to download, such as FlashGet network ants. Note: As long as the database filename contains ' # ' anywhere else, no one can download it properly. Similarly, a space number can act as a ' # ', but it must be a space in the middle of the file name.
4. The database connection files are placed under other virtual directories.
5. Access database encryption.