>When installing SP3, it told me that I'd be better to assign a password to the database. So, I did. However, without changing anything in my code, I am still able to connect directly to the database, when using SQLExec() without having to specific a username and a password. If I do, it works as well. Comments?

SP3 is asking to assign password to 'sa' account. My guess is that you're using trusted connection to SQL Server.