Using the database on the Internet to publish, collect, and manage information is often used, and now most of the server uses Microsoft IIS, most individuals or company users use the Access database of relative path addresses directly, this database It was found that there was no security, because it can be downloaded directly.
One way is to set up a DSN by the network administrator, but this cannot solve the problem that the database may be downloaded; many people say that the extension of the database file is changed to .sp or .dll extension, former Regardless of the .asp download, change the extension. MDB is still open, and it is changed to .dll too much trouble.
Now it provides a very simple and effective way, IIS generally allows CGI to change the Access database to .cgi, so that the server will only return an execution error, and the file is not downloaded.
