Using a stored procedure is the best way to interact with a database. I’ll use an example from the Dilithium Networks TCAN system (case.aspx).
Securing documents with ASP.net handlers
A client had been posting training files and some order templates in an unmarked directory on their website. None of them are really all that secret, but some contact lists and other things got picked up by google.
Executing Asynchronous Functions from ASP.NET
Don’t make your users wait unnecessarily. For example, a page where you generate a PDF and send it to someone else. Hand the job off to an asynchronous process and move on.