Here's the setup - secure certificate installed by isp. Need to have an "application" where clients can enter sensitive data. The application is in html, the submit button posts to form_accept.asp which posts the data to the database. There is also a form_showall.asp which will show the site owner all the applications. There is a button on that form to delete applications which posts to a form_delete.asp which actually deletes the file from the database. The database is MSAccess2000.

On the hosting server, they recommended setting up two folders in the root, one called DATA one called HTML. They recommended putting the DB in the DATA folder and all the rest of the pages into the HTML folder.

I believe the isp has set the HTML folder to be the root, otherwise would you have to type in www.sitename.com/HTML/index.html in order to get to the index page?

I was told that the whole site is secure so if I wanted the application to be secure all I had to do was link it to httpS://www.sitename.com/application.html to make it secure - but when I do that, that page doesn't show.

Is this clear as mud? Can anyone even begin to help? :confused: