Library tutorials & articles

Securing ASP Data Access

Storing Values

Now let's have some fun. Open MetaEdit. If you left it open while you ran MetaSchema.vbs, then close it and re-open it to make sure it reflects the changes the script made to the schema. Once you have the Metabase Editor console open, expand the Schema key, and then expand Classes. You should see a key folder named DataAccessMethods. (Mine appeared at the top of the list.) There's nothing of interest in it for us at the moment, but it's important to note (and verify) that it is there. Now, expand the /Schema/Properties/Names key. If you sort the list in the right hand pane by Id, you should see three items in the 13000 range that correspond to the three values we defined using the MetaSchema.vbs script. Each will start with "ODBC". The actual ID values may very depending on your server configuration.

Once you've verified that the new property types exist, minimize the Schema key and expand the LM key. LM stands for "local machine", by the way. Under this key you will see all kinds of keys for different kinds of services running under IIS on the server. You will want to create a new key to use for credential storage. Create a new key by right clicking LM and selecting New | Key. I chose to name my key ASP101, but you can call it whatever you like, as long as you also change any code that references this path.

Comments

  1. 18 Mar 2004 at 05:32

    Very impressive.


    Having been battling with ASP database security it is nice to know the solution is out there although it is still quite worrying that database security is quite so vunerable without going to these extremes.


    Thanks.


    Tom.

  2. 18 Mar 2004 at 05:32

    Very impressive.


    Having been battling with ASP database security it is nice to know the solution is out there although it is still quite worrying that database security is quite so vunerable without going to these extremes.


    Thanks.


    Tom.

  3. 23 Jul 2002 at 10:12
    Is this the end of the article?
  4. 01 Jan 1999 at 00:00

    This thread is for discussions of Securing ASP Data Access.

Leave a comment

Sign in or Join us (it's free).

Thomas C. Carpe I have been working in IT since 1993. I founded CarpeDiem Business Internet Systems in 1995. In 2000 we incroporated and took on two partners. Its really a grat lot of fun, and I enjoy working on t...
AddThis

Related podcasts

  • Scott Guthrie

    Scott catches up with Scott Guthrie in an interview covering Ajax, Asp 2.0, extender controls, CSS adapters and more.

We'd love to hear what you think! Submit ideas or give us feedback