Thank you all for your responses.

GaryMazzone: Just trying to read between the lines... are you suggesting that we put the business logic itself into the database? Also, the primary security concerns, other than things like passwords, is that the input sometimes contains personal data that we don't need, so my goal for that is to have the client scrub the data before it reaches our servers. That would excise what is by far the largest potential liability.

Shaggy Hiker: Yes, the program was written entirely in one form of basic or another over it's lifetime. Much of the code was rewritten during the migration to windows 15 years ago, but the algorithms and the very inefficient database design remained unchanged for the most part. And yes, we're going to use VS2010 (unless this gets put off again until VS2525 is released first ).

RobDog888: Right now Silverlight is on the top of my list, but I'm still waiting for it to be released before I start testing it out further. I do have a few concerns, however. Do you (or anyone else reading this) know of a book or website on Silverlight 4 that is particularly helpful and well-organized?

Thanks again for all your help