Setting up SQL for Web and remote access 1

[Biffy13]

Hi

I need to set up a SQL database for web access but I also need to allow the database to be accessed by certain other websites (on different webservers). I am competely new to this so am calling on your expertise.

I currently have SQL server (7) running on a Windows 2000 server on which I also host my website. I am thinking that I will need to setup a new user which only has certain permissions on the web database.

My questions really relates to the remote accessing. There are a number of other websites which reside on webservers dotted around the globe. I need for them to be able to query my SQL database and also update/insert records.

I would probably setup a seperate user for these purposes (as I only want to give them access to a couple of tables). I guess SQL allows you to lock it down this far?

But how secure is all this? We are trialing a firewall (software) on the webserver but would obviously need to allow connections through to SQL. Can SQL itself restrict access by domain name or IP address? And is it possible for the remote websites to connect to the SQL database through an SSL - can SQL handle the encryption? I am concerned about the websites passing through information as some of it is of a sensitive nature.

Any advise would be appreciated.

FYI - our webserver is always kept up to date with all security patches

Thanks
Biffy

 

[BobRodes]

I've been successful in accessing a remote server from a web page using VB and ADO, but don't know much about having one server access another over the internet in any direct sense.

The way I would handle it is to design an object that brokered data transfers between them, using Remote Data Services. If you're thinking along those lines, let me know if you have specific questions in this regard.

Good luck,

Bob

 

[Biffy13]

Thanks Bob.

I honestly don't know what route to go for best. Your suggestion of Remote Data Services sounds interesting. I will have to look into it as it may well be the kind of thing that I am looking for. If you have any more information on how it works I would be grateful. I shall be trawling through Google to see what I can find out.

Thanks

 

[miq]

sql server can allow access to IIS server account called IUSR_machinename. This account can provide anonymous access to web clients without giving them rights.

Also, Sql server can also be configured to allow firewall pass authenticated connections for sercurity.

check server network utility.


bye
miq