Hi,

Here is something I have been thinking about. Currently, I keep the connection string to the database inside a COM component. This way, if someone hacks into my computer, they cannot get the userid and password to the database.

I was just curious. If I stored my connection string inside the global.asa or the asp page itself, would that be safe. Can someone hack into my server and steal the global.asa or asp page and view my connection string. At that point, they have my userid and password to access my database.

Thanks