Simple ASP/Access DB Registration Site

[amdnVuser]

I've set up a simple registration site for my workplace using ASP and Access. I thought I set up permissions properly on the DB for the default IUSR_xxx. However, when I entered the file path to the Access DB in a Web browser, I'm given the option to Open/Save the DB. Does anyone know what permissions I'm supposed to use in order to prevent such access (I know it's highly improbable that someone would guess the name, and they can't see the Jet Engine OLEDB connection on the client side since the VBScript disappears when you click "View Page Source," but I'd still like to prevent this)? Should I just move the DB out of Inetpub and update the connection string? Thanks.

 

[Mark R]

You should never keep the DB in a web accessible directory - you should move it to an unshared directory.

 

[amdnVuser]

That's what I thought. Sorry, it's been a while since I've done Web design from the ground up.