Check this out. I can’t decide whether it’s worse to put connection string and SQL in clear text on your site or to connect to your database as sa with a blank password. At least they have a nice floating toolbar. Oh wait…