Skip to main content
R
Roflmeow
Known Participant
August 4, 2008
Question

Advanced SQL builder not working

  • August 4, 2008
  • 1 reply
  • 485 views
Hi all, I'm a Network administrator put in charge of web development at our small company, and i am working on what should be a fairly simple application for management of a MSSQL database using ASP/Jscript.

Using Dreamweaver CS3, i am for some reason unable to successfully build a search function for the database using the built in tools.

I have a page with 2 form entries, a list box with Column names (SearchBy), and a text field for the search terms(SearchFor). I've tired several different incarnations using my limited knowledge of asp, and none will work right.

I know the connection is solid and working. If i use static terms in the sql it brings everything up fine.

Here is a copy of the Dreamweaver generated code that was built using the Advanced Recordset builder tool. Can anyone help point out what's going wrong?

This topic has been closed for replies.

1 reply

N
Newsgroup_User
Inspiring
August 4, 2008
Roflmeow wrote:
> Hi all, I'm a Network administrator put in charge of web development at our
> small company, and i am working on what should be a fairly simple application
> for management of a MSSQL database using ASP/Jscript.
>
> Using Dreamweaver CS3, i am for some reason unable to successfully build a
> search function for the database using the built in tools.
>
> I have a page with 2 form entries, a list box with Column names (SearchBy),
> and a text field for the search terms(SearchFor). I've tired several different
> incarnations using my limited knowledge of asp, and none will work right.
>
> I know the connection is solid and working. If i use static terms in the sql
> it brings everything up fine.
>
> Here is a copy of the Dreamweaver generated code that was built using the
> Advanced Recordset builder tool. Can anyone help point out what's going wrong?

Are you passing the name of the column to be searched into the query? I
am sorry to say, this feature was removed due to security issues with
this method.

Steve
R
RoflmeowAuthor
Known Participant
August 4, 2008
It's fully updated, and this code is said to be safe from sql injection, due to the using of Parameters instead of using the calls directly from the form, this is dreamweaver CS3.

I am passing a Column name, and search term from a form to the recordset for filtering.

In either case, the form is pasword protected and used by employees only.
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices