Hi, I was wondering what the best way to securely connect to a database is using ASP? I have a connection to a database from an ASP page. It all works fine, but I find that I have to give lots of rights to the web user to the database so the ASP page can write data to it. This could be abused by somebody who could storm the database and write a load of junk to it. How can I restrict access to just the ASP page to write to the database? Many Thanks Xscript

I typically move the database into a folder that is not accessible via the web, for instance above the www (or wwwroot) folder, and then give security access to that folder, which is not accessible to anyone outside of the machine. Hope this helps, Chi They mostly come at night...mostly.

Chi, Yes, this is what I thought about doing, but the database is for an online enquiry form, so I have to give the anonymous web user write rights to the DB don't I? Thanks Xscript

you need to limit an access to your page with username and password and to save them in session object