I've generally put mine in an application variable, set in global.asa
however, your assertion isn't correct. ASP code is not avilable in a
view->source, and neither are include statements, so this isn't an issue as
you've described it.
Microsoft GTSC, IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
"James Johnson" <microsoft.com> wrote in message