Removing connection scripts – Adobe Dreamweaver CC 2014 v.13 User Manual
Page 642
Removing connection scripts
Using the Remove Connection Scripts command
Note: The user interface has been simplified in Dreamweaver CC and later. As a result, you may not find some of the options described in this
article in Dreamweaver CC and later. For more information, see
.
Using the Remove Connection Scripts command
You can use the Remove Connection Scripts command to remove scripts that Dreamweaver places in a remote folder to access databases. These
scripts are only needed for design-time authoring in Dreamweaver.
When you select the Using Driver On Testing Server option or the Using DSN On Testing Server option in the Database Connections dialog box,
Dreamweaver uploads an MMHTTPDB script file to the testing server. This allows Dreamweaver to manipulate the remote database driver with the
HTTP protocol, which in turn allows Dreamweaver to get the database information it needs to help you create your site. However, this file does
make it possible to see the data source names (DSNs) defined on the system. If the DSNs and databases are not password protected, the script
also enables an attacker to issue SQL commands to the database.
The MMHTTPDB script files are located in the _mmServerScripts folder, which is located in the root of your website.
Note: The Dreamweaver file browser (the Files panel) hides the _mmServerScripts folder. You can see the _mmServerScripts folder if you use a
third-party FTP client or the file browser.
In some configurations these scripts are not necessary at all. The scripts are not involved when serving web pages to visitors to your website, so
they should not be placed on a production server.
If you’ve uploaded the MMHTTPDB scripts file to a production server, you should delete the MMHTTPDB scripts file. The Remove Connection
Scripts command automatically removes the script files for you.
635