Web Security & IIS

[timmy]

does anyone know anything about the interaction between filemaker's Web Security and IIS (internet information services) Security? Any relevant, general, info would be greatly appreciated. Thanks,

Timmy.

[mbw]

My first experience with posting a web based data base was good from the standpoint that it could be done. Bad from the standpoint that in order to put on the web I had to open up the access to my computer. I'm using a Linksys 4 port cable/modem hub which has a built in firewall. I picked up a virus, low grade, within 10 minutes of setting up the access.

I'm a beginner in this area and from my one experience more information is needed.

Thanks

MBW

[Anatoli]

quote:

---

Originally posted by timmy:

does anyone know anything about the interaction between filemaker's Web Security and IIS (internet information services) Security? Any relevant, general, info would be greatly appreciated. Thanks,

Timmy.

---

Simple answer -- None.

The Web folder is "Open to public". You must protect your databases and make them hidden.

[proton]

quote:

---

Originally posted by Anatoli:

Simple answer -- None.

The Web folder is "Open to public". You must protect your databases and make them hidden.

---

Anatoli,

I'm reading your answer and a question just popped into my head. If one is using Lasso, does one still have to keep the web pages in the Filemaker Web Folder? If not, whatever folder the pages are kept in, is that folder still "Open to public"?

[dspires]

The database files do not have to, and should not reside in the web folder. Only the CDML files should be in the web folder.

[Anatoli]

Sorry, I know nothing about Lasso.

RE: The database files do not have to, and should not reside in the web folder. Only the CDML files should be in the web folder.

Sure. FM is sometimes recommending putting even db into Web folder for Remote start and such thing, but that is bad idea.

Still, even if db are not in web folder, they MUST be protected and hidden. Actually, just to set "multi-user-hidden" does not really hide them; databases should be hidden behind Firewall!