www.sqlsecurity.com
Great place!

www.oswap.org
I couldn't get to this site.

I googled a lot, and I saw an awfull amount of things that may be done with a simple login. We cannot continue to provide everyone with the connection information (server + user + pwd). It is unacceptable from now on (I mean for the new versions).

We can't do much at this time. All we can do to provide a final solution is to build the web based app and once it is complete, the db servers will not be required to be public anymore.

Thanks heaps!