Home Database Mysql Tutorial ACCESS攻守:防止数据库被下载的几种方法

ACCESS攻守:防止数据库被下载的几种方法

Jun 07, 2016 pm 03:12 PM
access download several kinds database method use virtual prevent

一、你用的是虚拟主机: 首先在你的MDB文件中建一个表.表中取一个字段名叫:NotDownLoad吧。 在表名建一个字段。字段中填入: 呵呵,再把数据库改名为.Asp的。为什么要取名为其实=’a’-1这里你可以乱输入只要不是正确的Asp语句就行了。因为这样把扩展名改成.

一、你用的是虚拟主机:

首先在你的MDB文件中建一个表.表中取一个字段名叫:NotDownLoad吧。

在表名建一个字段。字段中填入:



ACCESS攻守:防止数据库被下载的几种方法


呵呵,再把数据库改名为.Asp的。为什么要取名为其实=’a’-1这里你可以乱输入只要不是正确的Asp语句就行了。因为这样把扩展名改成.ASP后在IE中输入的时候。遇到了他就会去解释之间的代码,让他解释吧。呵呵会出错,所以数据库绝对不会正确的被下载



ACCESS攻守:防止数据库被下载的几种方法


你让为安全了吗?呵呵还不安全。我们还得在数据库名前加上一个#号。 如:#Data.Asp这里的#号并不是用来作防止下载的。防止下载的刚才的过程已经作了解释。当你有多个MDB文件,并放在同一个目录下.如:某个网站(由于安全原因,就不公布了)的整站系统。如果我们猜到管理员MDB文件的位置并且从另一个系统中得到SQL注入漏洞的同时可以采用ACCESS跨库查询的方法。来取得管理员库中的记录。 如果我们在库名前面加上#号的时候,就算你猜测到了,我们也不怕 提交:select * from d:webdata#data.asp.admin

sql查询语句,系统会提示出错。因为#在SQL语法中有表示日期的作用.语法出错也就不会去执行查询条件了。(呵呵,此网站目前还有一个漏洞我用access跨库的方法攻击成功过!)

我认为比较安全的数据库就应该是#文件名.Asp 并且建一个临时表,表中有一字段 输入ASP代码,让ASP不能被正确的解释。

二、你用的是托管主机拥有主机权:

这种防下载的方法就太好办了。呵呵把你的数据库放到IIS以外的目录。打死我,我也下不了。如你的WEB目录在D:WebWebSite目录下. 那么就把数据库保存在D:WebData目录下,当然目前某些虚拟主机,也提供专门的data目录。

三、设置文件不可以下载

在IIS中,数据库上右键属性中。设置文件不可以读取

ACCESS攻守:防止数据库被下载的几种方法
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

AI Hentai Generator

AI Hentai Generator

Generate AI Hentai for free.

Hot Article

R.E.P.O. Energy Crystals Explained and What They Do (Yellow Crystal)
2 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Repo: How To Revive Teammates
4 weeks ago By 尊渡假赌尊渡假赌尊渡假赌
Hello Kitty Island Adventure: How To Get Giant Seeds
3 weeks ago By 尊渡假赌尊渡假赌尊渡假赌

Hot Tools

Notepad++7.3.1

Notepad++7.3.1

Easy-to-use and free code editor

SublimeText3 Chinese version

SublimeText3 Chinese version

Chinese version, very easy to use

Zend Studio 13.0.1

Zend Studio 13.0.1

Powerful PHP integrated development environment

Dreamweaver CS6

Dreamweaver CS6

Visual web development tools

SublimeText3 Mac version

SublimeText3 Mac version

God-level code editing software (SublimeText3)

How to convert deepseek pdf How to convert deepseek pdf Feb 19, 2025 pm 05:24 PM

DeepSeek cannot convert files directly to PDF. Depending on the file type, you can use different methods: Common documents (Word, Excel, PowerPoint): Use Microsoft Office, LibreOffice and other software to export as PDF. Image: Save as PDF using image viewer or image processing software. Web pages: Use the browser's "Print into PDF" function or the dedicated web page to PDF tool. Uncommon formats: Find the right converter and convert it to PDF. It is crucial to choose the right tools and develop a plan based on the actual situation.

How to read dbf file in oracle How to read dbf file in oracle May 10, 2024 am 01:27 AM

Oracle can read dbf files through the following steps: create an external table and reference the dbf file; query the external table to retrieve data; import the data into the Oracle table.

Detailed tutorial on establishing a database connection using MySQLi in PHP Detailed tutorial on establishing a database connection using MySQLi in PHP Jun 04, 2024 pm 01:42 PM

How to use MySQLi to establish a database connection in PHP: Include MySQLi extension (require_once) Create connection function (functionconnect_to_db) Call connection function ($conn=connect_to_db()) Execute query ($result=$conn->query()) Close connection ( $conn->close())

iOS 18 adds a new 'Recovered' album function to retrieve lost or damaged photos iOS 18 adds a new 'Recovered' album function to retrieve lost or damaged photos Jul 18, 2024 am 05:48 AM

Apple's latest releases of iOS18, iPadOS18 and macOS Sequoia systems have added an important feature to the Photos application, designed to help users easily recover photos and videos lost or damaged due to various reasons. The new feature introduces an album called "Recovered" in the Tools section of the Photos app that will automatically appear when a user has pictures or videos on their device that are not part of their photo library. The emergence of the "Recovered" album provides a solution for photos and videos lost due to database corruption, the camera application not saving to the photo library correctly, or a third-party application managing the photo library. Users only need a few simple steps

Top 10 Currency Trading Platform Virtual Currency Apps Top 10 Reliable and Useful Currency Trading Apps Top 10 Currency Trading Platform Virtual Currency Apps Top 10 Reliable and Useful Currency Trading Apps Feb 17, 2025 pm 03:57 PM

With the thriving virtual currency market, choosing a reliable trading platform is crucial. This article recommends 10 highly respected virtual currency trading platforms, including Binance, Coinbase, FTX, Huobi, OKX, Gemini, Kraken, Bitstamp, Bittrex and KuCoin. Factors such as security, liquidity, expenses, asset selection and user experience are crucial when choosing a trading platform. This article will provide you with authoritative reference and help you find the trading platform that best suits your needs.

How to handle database connection errors in PHP How to handle database connection errors in PHP Jun 05, 2024 pm 02:16 PM

To handle database connection errors in PHP, you can use the following steps: Use mysqli_connect_errno() to obtain the error code. Use mysqli_connect_error() to get the error message. By capturing and logging these error messages, database connection issues can be easily identified and resolved, ensuring the smooth running of your application.

How does Go WebSocket integrate with databases? How does Go WebSocket integrate with databases? Jun 05, 2024 pm 03:18 PM

How to integrate GoWebSocket with a database: Set up a database connection: Use the database/sql package to connect to the database. Store WebSocket messages to the database: Use the INSERT statement to insert the message into the database. Retrieve WebSocket messages from the database: Use the SELECT statement to retrieve messages from the database.

How to use database callback functions in Golang? How to use database callback functions in Golang? Jun 03, 2024 pm 02:20 PM

Using the database callback function in Golang can achieve: executing custom code after the specified database operation is completed. Add custom behavior through separate functions without writing additional code. Callback functions are available for insert, update, delete, and query operations. You must use the sql.Exec, sql.QueryRow, or sql.Query function to use the callback function.

See all articles