FrontPage sees files beginning with an underscore as `hidden'. To rectify this, 

go to 

tools > web settings > advanced

 and ensure that `show documents in 

hidden directories' is checked. 

3.2.3 

Setting up CactuShop to use an ODBC datasource 

Some users prefer to connect to the database via ODBC. If so, set up the data 

source and change the 

strDataSourceName

 setting in the 

includes/config.asp

file to the name of your data source, with quotes around it. For example: 

strDataSourceName = "mydatasource"

3.2.4 

Changes for security reasons 

The database and its folder should both have their names changed at this 

point. You will need to adjust the database connection in the 

config.asp

 to 

reflect these name changes. If you do not change these default values, 

malicious users will easily be able to download your database and any private 

customer data it may hold. If your hosting provider has a `private' or `data' 

folder specifically for Access databases, we'd strongly advise using this (again, 

see figure 1 above). Such a folder has no read access permissions, so 

documents within it can't be accessed by HTTP. 

Furthermore, the back end password of the main admin user account should 

be changed from the default (`cactushop') too. 

CactuShop has code to write warnings to the screen if the default settings are 

not changed, so it should be difficult to inadvertently leave the default 

settings and put a web site live. 

3.2.5 

IP address security 

For increased security of the CactuShop back end, you can limit access by IP 

address from within the config.asp file when you set up your store. 

CONST BACKEND_IP_LOCK = "xxx.xxx.xxx.xxx"

You can also allow slightly broader access if you have consecutive IP 

addresses, for example: 

CONST BACKEND_IP_LOCK = "xxx.xxx.xxx"

This feature is best for users with a fixed IP address.  It will prevent anyone 

else from accessing the back end of the store even if they learn the username 

and password of a valid login account. 

Do not use this feature if you have a dynamic IP address and are unaware of 

the range. 

3.3 Setting 

Permissions 

The folders and Access database file need certain security permissions set in 

order to function properly. Figure 1 above shows the settings required on the 

various folders. Note that these permissions cannot be changed via 

FTP. If your web host doesn't set these as standard, you will need either 

20