(no subject)

[dryfter]

http://www.hbeu1.hsbc.com/ukservices/branchlocator/includes/sql.inc

Ouch.

Worse: They're using Access???

I hope none of you bank with HSBC!

Comments

[drreagan.livejournal.com]

muppets.

[merlinc.livejournal.com]

Arse.

[inferis.livejournal.com]

Quite apart from the terrible architecture choice, this is one of the reasons that I always end include files with ".inc.asp", not just ".inc".

[deliberateblank.livejournal.com]

I use:

Options -Indexes
<Files ~ "(\.inc|\.bak|\.sql|~)$">
  Order allow,deny
  Deny from all
</Files>

(Plus any others you may end up creating but not wanting to serve.) Generally I require AllowOverride Options Limit Indexes and FileInfo for all the things I end up doing to Apache.

[excy.livejournal.com]

Access is alright for a branch locator, not sure about online banking though. ;) Hopefully they use something else.

[mock2.livejournal.com]

i'd agree with russ in this case - the .mdb format isn't a particularly bad choice in this case, its uncomplicated and the data isn't sensitive. Still, leaving one's server configured to serve include files is 'tarded :)

Its worth noting that php offers a similar db setup these days - check http://www.sqlite.org/faq.html

[onia.livejournal.com]

Not being nearly geeky enough, I don't understand.
My Mum banks with HSBC though, is it something bad enough to make it worth telling her about? :)