Securing your MS Access Database

Overview

Leaving your MS Access database file in a publicly accessible web folder is a security risk. By default, the MS Access database used by MetaTraffic is web accessible so this issue affects most MetaTraffic users that have not manually moved the database. The best solution to prevent access to your database is to move the database file out of your publicly accessible web folders. If this is not possible, at a minimum you should rename the database file to an obscure file name to prevent easy access to the file.

The instructions below are for any version of MetaTraffic 2 or greater including both Lite and Pro. The instructions assume you have already installed MetaTraffic and only apply if you are using MS Access as your database. This issue does not affect SQL Server or MySQL databases.

Moving the Database

1. Login to MetaTraffic and turn off logging in the Settings > Configuration section. (Set Enable Log to No.)
2. Move the database (db.mdb file) to a folder than cannot be accessed on your web site. This will usually be a higher directory than the root or base directory of your web site.
3. Edit Line 4 of the conn.asp file:
   aryMTDB(1) = "d:\inetpub\databases"
   Insert the physical path to your database location without a trailing slash. If you do not know what the phyical path is, ask your web hosting provider or server administrator. The above path is an example only but it should be in the same format beginning with the drive letter.
4. Login to MetaTrafffic and re-enable logging

Renaming the Database

1. Login to MetaTraffic and turn off logging in the Settings > Configuration section. (Set Enable Log to No.)
2. Rename the database (db.mdb file) to a random set of numbers and letters, for example 28aj02dfa0.mdb.
3. Edit Line 5 of the conn.asp file:
   aryMTDB(2) = "28aj02dfa0.mdb"
   Insert the new filename to your MS Access database file between the quotations. (Create your own unique filename. Do not use the example provided here.)
4. Login to MetaTrafffic and re-enable logging

If you have any questions or need support, feel free to post a message in our support forum. If you have purchased MetaTraffic Pro, you may also send a support request.