Hi Guys, wondering if you would all like to contribute any techniques on securing a database...

I'm new to all this asp stuff, but at the moment I have cobbled together a nice small asp forum using an access database for my site.

The forum, and I guess all databases by definition has private info in (friends emails etc,) and purely because I know the path, I can download the db from IE - obviously I dont want this to happen with uninvited guests...

So, any ideas of cheap effective methods?

I havent had time to try it yet cos Im out and about over the next few days, but I thought about storing the DB above and out of the HTDOCS root, and having the ASP go up levels (ie ../../../private.db) to access it.

Anyway, post any useful techniques...

[sexdwarf]

yes you definatly do not want to keep the msaccess database in the web accessible area...