[kh99]

I'm probably not the right person to tell you how to design such an app (what *am* I the right person for, you may ask? Maybe nothing ). Offhand I wouldn't feel so good about a system that only depended on the script name remaining secret, but you might be able to do something as simple as sending a password as part of the request (I don't see how that's less secure than vb is now, as long as you have some kind of time delay or max tries for a wrong password).

Do you have any experience, or can you point us in the right direction?

Experience with what, accessing the database directly? Not really, I'm just familiar with what vb does. I guess I'd probably find the vb code that adds a user and try to use what I could from it.

Maybe someone else will read this and have a better idea.