[AccessD] Learning .Net

Jim Lawrence accessd at shaw.ca
Tue Jun 23 16:52:44 CDT 2009


Hi Stuart:

That is true. It is just that I ran across simple sites with MDBs in them
that are little more than HTML sites. As soon as a full blown web based
language is used the results may not be secure but the coding is.

Your email ended abruptly...?

Jim 

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com] On Behalf Of Stuart McLachlan
Sent: Tuesday, June 23, 2009 1:23 PM
To: Access Developers discussion and problem solving
Subject: Re: [AccessD] Learning .Net

You can only use BSB and similar applications to grab a website which is
built of simple 
static HTML pages.  They just trawl through a site following all the links
on all exposed  
pages starting from the root (index.html ???) and  store everything returned
by HTTP GET 
requests.  Some go a step further and try to get a listing of every file in
each exposed 
directory, but if there is no direct link on a served up page to any file in
a directory, the 
application won't know that the directory exists.

If your site uses PHP, ASP, CGI etc etc and ANY form of database, even a
simple text file, 
BSB will not find it unless there is a specific link to it on a page served
up.
 
It won't even identify the use of Server Side Includes.  If you use SSI for
a standard 
header/footer on each page, BSB and its ilk will not retrieve the include
file, it will store each 
page as server

There are 


On 23 Jun 2009 at 12:39, Jim Lawrence wrote:

> Having a MDB database is exposing all your data as the MDB can just be
> copied straight off the website. On the other hand MS SQL can not be
stored
> at a website as it is one step removed from the web site, protected
through
> your IIS or Apache server and therefore safer. 
> 
> If you do not believe me try out the free OpenSource web base extraction
app
> called Back-street Browser (http://www.spadixbd.com/backstreet ) just to
see
> how fast you can backup your website... or anyone's website for that
matter.
> 

-- 
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com




More information about the AccessD mailing list