Best Way to Update a SQL Server DB

Hi all,

I would like to know what the consensus of opinion is regarding the best
method to employ to update a SQL Server database from an ASP page.
The mitigating factors are that there will be many people updating and add
new records throughout the day, and many people running reports using
crystal webreports.

From where I'm standing there are the following options:

1. Open an ADO recordset based on the table and update the fields of either
a new record, or an existing record.
2. Use a UPDATE or INSERT INTO SQL string.
3. Use stored procedure and an ADO command object.

What is the best option in terms of locking, do Stored procedure insert and
update quicker than using a recordset?
I'm basically looking for the most robust and secure method to update a
database.

Cheers
Alex

Number 3 is also more secure. You can apply object permissions to the Stored Procedure, limit SQL injection through parameters, etc.