Hi,
I've got some forms that I want to put on the web.
I'm under pressure to do them by next week but I don't really know what I'm doing. I've got my head around just about everything but I don't really understand how ADODB connections work. I've read up about them but I think it all went a bit over my head.

I want them to be available only to people whom I've given a login name and password.
I've created an initial login page which is my default.asp.
When a user accesses the page they get a form with input boxes for user name and for password. VB script opens a connection and sends the user names and password to a sql server stored proc which valdates it against a table of user names & passwords. If the username is valid and the password is correct the user is redirected to the forms. If not they are redirected back to the login page.
All ok but...
It doesn't stop direct access to the forms via the urls. I can't work out how to stop people bypassing my login page.

Also:

I have 2 forms and a login page. Both of the forms retreive and send information. I am currently opening a connection for each acitvity. So on one asp I am opening two connections. One for retreival of info and one to send. I also have a lot of drop downs that get filled by little stored procs. Each time I open a stored proc I open a mew connection. Over 4 asp pages, I open about about 9 separate connections. I do not close any of them.
Is this bad practice?

Surely I should just have one connection open?
Do the connections close automatically when the user navigates away from the page or are they left open unless I close them in the code?


Please help,
David.