SQL 2000 Backend Database to Website

Question

SQL 2000 Backend Database to Website

Levi Meeson

SSC Enthusiast

Points: 162
More actions
May 2, 2006 at 5:31 am

#93971

Hi,
This is my first post...
Could you give me help for securing a backend sql server for my website.
e.g. should i join it to a domain for windows authentication or no use the server's windows authentication.
any tips e.g. securing services, passwords etc...

Viewing 12 posts - 1 through 11 (of 11 total)

You must be logged in to reply to this topic. Login to reply

lee-324272 SSC Rookie Points: 28 More actions · Answer 1

hello Levi,

Your question is too general. It all depends on the environment you are running. If you have an Active Directory environment running on IIS then sure Windows Authentication would work. Also what comes into play is the question if your going to be using Asp, Asp.net or even PHP for the web programming? I would look at what existing technologies are avaliable to you and base your decision on that.

Thanks,

LEE

lee
MCSA 2003
ASP & ASP.net Developer

Antares686 SSC Guru Points: 125444 More actions · Answer 2

Also, is this website on an intranet or on the internet?

Levi Meeson SSC Enthusiast Points: 162 More actions · Answer 3

Hi,

It's a backend server for the internet. There is a 2003 AD domain available. The front end server will be running php.

Any ideas?

Cheers

lee-324272 SSC Rookie Points: 28 More actions · Answer 4

Hello again,

PHP does have a certain LDAP connector but the question is how your going ot integrate the security into your application? Are you going to assign permission on a page by page basis or would it be a all or nothing type access to your application? From my previous experiences, i used ASP to create a security system that allowed usered to access certain sections of the application. Ofcourse this adds to the development time of the application. Recently I've played with Visual Web Developer 2005 and found its security intergration rather easy to use. It provides a sort of GUI interface into the web.config file which is where windows authenication or form authencation can be assigned. Once again it all depends on which avenue you want to take in the creation of your application.

Thanks

Lee

Edit: here is a lil doc on PHP and Active Directory, i guess call it a starting point. http://www.experts-exchange.com/Web/Web_Languages/PHP/PHP_Windows/Q_21043386.html

lee
MCSA 2003
ASP & ASP.net Developer

Levi Meeson SSC Enthusiast Points: 162 More actions · Answer 5

Hi,

Thanks for the reply. It will be a single user in every script that connects (the same user).

I'm not so concernced about db permissions etc, i was thinking more along the lines of disabling services, locking down functions etc & securing the box.

Although I'm happy with Windows 2003 Server, I just wanted to know what I should be tweaking in SQL 2000.

Levi Meeson SSC Enthusiast Points: 162 More actions · Answer 6

Levi Meeson

SSC Enthusiast

Points: 162

May 3, 2006 at 2:34 am

#635512

cool cheers

Luke L SSC-Dedicated Points: 35547 More actions · Answer 7

As far as hardening a server or SQL installation, first things first, make sure the atches are up to date. Then check various security resources white papers etc from MS, US-CERT.Gov, sans.org, FBI.gov, csrc.nist.gov, dshield etc.

To help us help you read this[/url]For better help with performance problems please read this[/url]

Ninja's_RGR'us SSC Guru Points: 294069 More actions · Answer 8

Ninja's_RGR'us

SSC Guru

Points: 294069

May 3, 2006 at 7:40 am

#635597

...the patches are up...

Luke L SSC-Dedicated Points: 35547 More actions · Answer 9

Yeah patches... I knew I should have spent more time with Mavis Beacon...

To help us help you read this[/url]For better help with performance problems please read this[/url]

Tanmoy Das SSC Rookie Points: 36 More actions · Answer 10

Can any body Tell me how to put up a MS SQL Data base to a website. Curently I am having an access database as backend. But I have throught of changing it to MS SQL Data base. It would be nice it some body elaborates me the process and steps involved. Also I have another quesion How much record In genreal how much data can an access database hold without significant drop in performance.

ThankX in advance.

Ninja's_RGR'us SSC Guru Points: 294069 More actions · Answer 11

I'd suggest you start a new thread for this question so that more persons read it.

Also performance wise, I can assure you that if access can handle it then sql server most certainly can (assuming that the design is not completly flawed).