All Tags »
CLASSIC ASP TUTORIALS
Sorry, but there are no more tags available to filter with.
-
Never use DYNAMIC SQL to insert text data... NO GOOD, I say NO GOOD, very BAD...
THIS IS NO GOOD: conn.execute(''INSERT INTO tblmemo([memo]) values (''' & Request.Form(''editor1'')& ''')'')
Your Request.Form(''editor1'') value will include invalid caracters like single quotes (') and double quotes ('') and will create SQL ...