Preventing database files from being downloaded by safely configuring IIS


Many websites are now being hacked by some hackers because the source address of the database is obtained by hackers, and the database files are controlled by hackers, and the website is hacked. So I researched IIS and thought of a way to securely configure IIS to prevent the database from being downloaded. After configuration, even if the hacker gets the location of the database and the file name of the database, the hacker can't download it to your database file through any software. Keep the server's database in a safe place! Is it very cool, in fact, it is very simple, as long as you set a redirect URL for the database file.
Let's take an example, let's say I want to build a website, the domain name is, use asp plus access database interactive dynamic home page, the database file is not encrypted, as long as the hacker downloads the database, you can get the website admin Control, the home page file name is index.asp.
The address of the database file is in the file of conn.asp. Suppose our database is named netpk.mdb. The database file is in the root directory of the net. We just need to set the file redirection URL to the file conn.asp. On the line, as shown below, we first set the conn.asp file redirect URL, and then set the netpk.mdb file redirection in the net folder under the root directory. Very simple, through the above security configuration, your dynamic website can be used normally, but hackers can't download your database. If the hacker knows your database location, then the hacker downloads your database file with those download tools. Netpk.mdb this file, the hacker downloaded only the home page of, can not download the database file, because the database has been set to redirect, all the connections to the file address of this database will be Redirect the connection to the home page of The hacked database file will be your home page index.asp .
You can now safely tell your database address to see if anyone can download your database normally, huh, huh!
Note: Because I have to go to work, time is limited, just casually studied, did not do too many database download tests, but in theory it is impossible to successfully download the database. If you have any way to download the database after getting the database address, please contact me for communication technology, thank you.

Copyright © Windows knowledge All Rights Reserved