Storing images outside of html root

I was thinking under the logic that since my OLE connection string
accesses the .mdb file in a folder outside the HTML root via a direct
path (drive:\path\db.mdb) that I could to the same logic. However, the
more I think about it, I can see how this is not possible since the
database it being accessed on the serer from a server based script. If I
was to call an image via a direct drive letter path from a webpage, then
I would be accessing that file as the IUSER account, which doe not have
access to the database folder.

Steve

On 7/20/2004 9:38 AM, Michael Fesser wrote:

.oO(omegaskl)


So what you are saying is that I can put them in the same folder that my
database resides (outside html root)


For example.


and use a script to delver the
images? That sounds cool.

Right now, I am using IIS, Access and VB Script.


Hmm, don't know about VB, I use PHP. The streaming-script is accessible
with an URL and is able to read files on the server directly through the
filesystem. It reads the requested file and passes it through to the
browser.

Currently I use this for a download script to count how often a file has
been downloaded. The idea is the same.


What I have seen other sites do is just name the image being served a
random string, such as GhJuY67.jpg. That would make it real difficult
for people to guess that image A goes with database record A.


True, but it's still "security by obscurity", I wouldn't rely on that if
other methods are possible.

Micha