How do I safely allow a web app to query my access database?

[Laura]

I have an access application that is currently just used internally by about
a dozen users. I have split it into a front-end and back-end and have had no
problems so far.
Now we want to allow a web application (asp) to query the BE to display some
data on a web page. In order to do this, I'm thinking the web app will have
to use the BE database password, which gives full access. Is there a way I
can give the web app read-only access?
I can't take risks with this data, so I need to determine if I can do this
safely, or if I need to upgrade to SQL server.
Any words of wisdom will be greatly appreciated!

 

[ben]

You want to use the LockType property command to your recordset.
rs.LockType=adLockReadOnly

Here is a good website to explain this property with an example
http://www.w3schools.com/ado/prop_rs_locktype.asp