people can view your .inc (include) if they view source.<BR>it's recommended that you have the extension .asp<BR>for any include file, *especially* db conn strings, etc.<BR><BR>it get's processed the same as any .asp file.<BR><BR>right guys? I'm sure it uses the same asp.dll
a .inc file is an include file. for better security, i usually use .asp files in place of .inc files as a rule. that way, no one can "view source" to see what i've got in the include file.<BR><BR>make sense? if not, i will try to explain it better.