>What is the optimum & most secure way to update data from within an application.
>some use direct "Update" command, some do it through SQL stored procedure, ...
>
>The development tools used are VB.NET 2008 and SQL 2005

You will want to use stored procedures.