ASP Best Practices |
The /Data directory contains all database access information such as SQL scripts, filebased dataset names or similar data needed by the application. Do not place this directory under the site directory, as this could enable an unauthorized user to access business rules and private data.