A reader asked if there was any way to completely hide the ASP source code, even from the IIS administrator. There are a few basic facts about ASP pages:
1. ASP source code is in a text format.
2. The IIS administrator typically is the machine administrator, which means he/she can see any file on the machine.
3. In order for the files to be viewed by web visitors, they have to be readable by the web user ID, which means they are readable by everyone.
If you don’t want anyone looking at your source code, you’ll have to put all the source code (or as much as possible) within a compiled component developed in VB or some other language. I do this for performance, but it doubles as a security precaution.