|
NP.
Typically what you do is create 1 database script file that you can include on all your pages as a server side include file something like mydb.asp or mydb.inc, something unique and not common like db.asp or db.inc. Most programmers use db because it's easy to remember but it's also easy to try to hack. What I meant is DO NOT use the .inc file extension when using ASP. I cannot express this enough.
By only having 1 db file with the connection string. This will allow you to easily update the whole site without having to change 50 pages. As far as your DBA account you should really create a unique user that has read/write access so it can add/remove/alter data but not be able to create tables/remove tables or access any admin resources via browser. The last thing you need is to someone get your password log in create a new user and when you change your password the other account is still active if you don't know about it.
imaginemn
|