I am in the process of moving our site and the new package comes with MS SQL (only ever used access so far).

Now I have converted the access db and uploaded it no problem - I think, but I can only get the content to display using the SQL Server login and password supplied by the host hard coded into the connection string (DSN assigned by host). I know that the information never reaches the client but it still seems to be unsecure. I know this is probably a dead simple answer but I'm totally new to heavy duty databases