Hi
I've been suffering on one of my domains from a nasty
outbreak of sql injection on a site created in DWMX2004 some years
ago. I've tightened up form and url variable security by updating
the behaviours to DW8.02 ones, but this seems to be insufficient.
My next idea was to create two different sql server login accounts,
one for the public pages which has only very limited priviliges
(can select but not insert/update/delete except where specifically
required) and one for the content management system, which can do
everything.
Trouble is Dreamweaver won't allow me to have two database
connections defined in one site. This means half my pages can't be
edited because the path to the connections file is not valid. I can
have two connections files (each one used by half the site) and
keep on redefining the master database connection as I move between
files, but this is not ideal. Equally I can define two sites (one
using each connection) accessing the same folder and keep switching
between them, but this is also a pain.
Does anyone know of a better way to do this?
Any thoughts gratefully received.
TP