Re: .ASP security question

2004-03-05 Thread Ben Braver
> From: Ben Braver    > To: CF-Community    > Sent: Friday, March 05, 2004 1:31 PM    > Subject: Re: .ASP security question > >    > Very useful, thanx, but going in circles:    > first thing I did after reading a similar help screen    > was try to find the OLED

Re: .ASP security question

2004-03-05 Thread Ben Braver
The ASP asks for a logonid and password... >Does the ASP still work? Could he have passworded the database when the app >was offline? > > > >-Original Message- >From: Ben Braver > > > >Is it possible that OLEDB can query a password-protected Access >database WITHOUT using a password? >

RE: .ASP security question

2004-03-05 Thread Harkins, Patrick
Does the ASP still work? Could he have passworded the database when the app was offline? -Original Message- From: Ben Braver Is it possible that OLEDB can query a password-protected Access database WITHOUT using a password? Thanks. /Ben Outbound email scanned for viruses. (e230) [To

Re: .ASP security question

2004-03-05 Thread Matthew Small
Here's a better way to get your password back and it appears that they have a trial version. http://www.elcomsoft.com/aoxppr.html - Matt Small   - Original Message -   From: Ben Braver   To: CF-Community   Sent: Friday, March 05, 2004 1:31 PM   Subject: Re: .ASP security que

Re: .ASP security question

2004-03-05 Thread Ben Braver
Very useful, thanx, but going in circles: first thing I did after reading a similar help screen was try to find the OLEDB .udl file or wizard on the box. Couldn't find either. Any clues there? Thanx. /Ben >not sure if this is useful but: >http://support.microsoft.com/default.aspx?scid=http://suppo

Re: .ASP security question

2004-03-05 Thread Matthew Small
al Message -   From: Ben Braver   To: CF-Community   Sent: Friday, March 05, 2004 1:25 PM   Subject: Re: .ASP security question   I know the conn string, it's in one of the ASP scripts:   var oConnString = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=\\inetpub\\wwwroot\\Competenc

Re: .ASP security question

2004-03-05 Thread Ben Braver
T using a password? Thanks. /Ben > Forgot the closing parentheses: > response.write ("The conn string is: " + oConnString + " ">) >    > - Original Message -    > From: Matthew Small    > To: CF-Community    > Sent: Friday, March 05, 2004 1:56 PM  

Re: .ASP security question

2004-03-05 Thread Matthew Small
Forgot the closing parentheses: response.write ("The conn string is: " + oConnString + " ">)   - Original Message -   From: Matthew Small   To: CF-Community   Sent: Friday, March 05, 2004 1:56 PM   Subject: Re: .ASP security question   You need to find out t

Re: .ASP security question

2004-03-05 Thread Matthew Small
f course, it will be available to everyone who views that page. - Matt Small   - Original Message -   From: Ben Braver   To: CF-Community   Sent: Friday, March 05, 2004 12:45 PM   Subject: Re: .ASP security question   Searched the code for "password" and found this:   //Retrie

Re: .ASP security question

2004-03-05 Thread Ben Braver
Searched the code for "password" and found this: //Retrieve username and password from previous form var oUser = Request.Form("uName"); var oPass = Request.Form("pWord"); //Open database connection var tblAuth = Server.CreateObject("ADODB.Recordset"); var strSQL = "Select * FROM Authenticat

RE: .ASP security question

2004-03-05 Thread Harkins, Patrick
that was in Jet 3.0-3.5. I also seem to remember that where was a flaw in the password system that made it ridiculously easy to get into it, but I can't remmber what it was. - Matt Small Outbound email scanned for viruses. (e230) [Todays Threads] [This Message] [Subscription] [Fast Un

Re: .ASP security question

2004-03-05 Thread Matthew Small
. - Matt Small   - Original Message -   From: [EMAIL PROTECTED]   To: CF-Community   Sent: Friday, March 05, 2004 10:19 AM   Subject: OT: .ASP security question   Hi gang,   Somebody who isn't there any more developed a small app with an ASP (not .NET,   just ASP) front end, and an

RE: .ASP security question

2004-03-05 Thread Harkins, Patrick
PS, given the ability to reference the system.mdw, it would seem that the OLE DB connection is using Access security. this is from the url I referenced: The final Connection String should look like this: Provider=Microsoft.Jet.OLEDB.4.0;Password=joe;User ID=jim;Data Source=C:\My.mdb;Persist

RE: .ASP security question

2004-03-05 Thread Harkins, Patrick
not sure if this is useful but: http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com: 80/support/kb/articles/Q264/6/91.ASP :80/support/kb/articles/Q264/6/91.ASP&NoWebContent=1> &NoWebContent=1 Patrick -Original Message- From: [EMAIL PROTECTED] Hi gang, Somebod

OT: .ASP security question

2004-03-05 Thread bbraver_cf
Hi gang, Somebody who isn't there any more developed a small app with an ASP (not .NET, just ASP) front end, and an Access 2000 back end. It's a small internal training competency tracker. We "inherited" it and were asked to make some changes to the database. It's password-protected. Before w