Yes! agree with Mechanix,
but for download .mdb file the name and location should know, and you can use password protection as well,
but the core thing is that you should store the mdb (database) out side of wwwroot folder
and if you store the (database) out side of wwwroot folder so you have to use the physical path. "C:\web_projects\My project\database\users.mdb"
just replace this line
database = Server.MapPath("../database/users.mdb")
with
database = "C:\web_projects\My project\database\users.mdb"
Note this path for example only
if you are working on web server (hosting company) not the local system so you can fine the physical path. using Server.MapPath() function
<% response.Write Server.MapPath("/") %>
create a asp file with this code, which will write the physical path of your root folder
hope this will useful for you
regards,
Rahul