Need security advice/direction.

We have plenty of PHP pages that select and display data (read: "SELECT permissions only"). Looking to have laboratories submit their samples via browser/PHP (read: "INSERT permissions"). SQL Server 7.0 back end. Need some direction here on security "where to's" and "how to's" before I take off on a wild journey to who knows where. A working example would be acceptabale too!! tia John A. Davis Information Systems Specialist State of Oregon DHS DWP State of Oregon If you had to identify in one word, the reason why the human race has not achieved and never will achieve its full potential, that word would be "meetings. -- Dave Barry