I agree with the statement that the port of sql server i.e. 1433 should be blocked by the ISP. But can anybody tell me the way how to pass the parameters to the asp file which I will have to call in another case (to implement security). As Most of the clients requires performance.