B4J Question [abmaterial]How to configure file permissions

[liulifeng77]

I stored my connectionstring(ms sqlserver) in a text file.
but the text file can be opened in the browser!
how to prevent it!
thanks!

 

[alwaysbusy]

Have you set dirAllowed to false in StartServer?

#If RELEASE
     srvr.SetStaticFilesOptions(CreateMap("cacheControl": "max-age=604800,public","gzip":True,"dirAllowed":False))
   #Else
     srvr.SetStaticFilesOptions(CreateMap("cacheControl": "max-age=604800,public","gzip":False,"dirAllowed":False))
   #End If

If you did, then someone would have to 'guess' what your file is called to be able to open it. So maybe call it something one cannot guess that easy? like '24J4b7Q4M6kS.config'

 

[mindful]

@liulifeng77 you could and should store that file outside of the www folder

 

[liulifeng77]

@liulifeng77 you could and should store that file outside of the www folder

that's good idea!thanks!