Skip to main content
Inspiring
January 12, 2007
Question

version 8.02 recordset changes !!!!!

  • January 12, 2007
  • 2 replies
  • 205 views
As i understand it - In version 8.02 the recordsets are created differently
now! WHY??????
Something to do with SQL injection problems.

The problem is i can't get my sql to work now.
I can't find any info on how to get my code to work now.

I have this code below which uses INNER JOINS from an Access database.
What i normally do is create the SQL in Access and then copy this into the
recordset - worked fine.

Now my code below doesn't work and doesn't show the recordset in DW.

Can anyone help or advise me on how to get this working please ???

Thanks
Andy

<%
Dim RSelectrical__MMColParam
RSelectrical__MMColParam = "0"
If (Request.QueryString("Category") <> "") Then
RSelectrical__MMColParam = Request.QueryString("Category")
End If
%>
<%
Dim RSelectrical
Dim RSelectrical_cmd
Dim RSelectrical_numRows

Set RSelectrical_cmd = Server.CreateObject ("ADODB.Command")
RSelectrical_cmd.ActiveConnection = MM_shoppingcart_STRING
RSelectrical_cmd.CommandText = "SELECT Categories.Category,
Products.ProductID, Products.CategoryID, Products.ManufacturerID,
Products.ProductCode, Products.Product, Products.Description,
Products.Image, Products.Price, Products.Break1, Products.Price2,
Products.Break2, Products.Price3, Products.Break3, Products.InStock,
Products.TimeKey,Products.Special FROM Categories INNER JOIN Products ON
Categories.CategoryID = Products.CategoryID
WHERE Products.CategoryID = ? ORDER BY Price ASC"
RSelectrical_cmd.Prepared = true
RSelectrical_cmd.Parameters.Append
RSelectrical_cmd.CreateParameter("param1", 5, 1, -1,
RSelectrical__MMColParam) ' adDouble

Set RSelectrical = RSelectrical_cmd.Execute
RSelectrical_numRows = 0
%>


This topic has been closed for replies.

2 replies

Inspiring
January 12, 2007
I've re-installed version 8.0 to fix the problem short term - But i still
think tis needs a solution.
Andy


"Andy" <me@work.com> wrote in message
news:eo7kkr$jk9$1@forums.macromedia.com...
> As i understand it - In version 8.02 the recordsets are created
> differently now! WHY??????
> Something to do with SQL injection problems.
>
> The problem is i can't get my sql to work now.
> I can't find any info on how to get my code to work now.
>
> I have this code below which uses INNER JOINS from an Access database.
> What i normally do is create the SQL in Access and then copy this into the
> recordset - worked fine.
>
> Now my code below doesn't work and doesn't show the recordset in DW.
>
> Can anyone help or advise me on how to get this working please ???
>
> Thanks
> Andy
>
> <%
> Dim RSelectrical__MMColParam
> RSelectrical__MMColParam = "0"
> If (Request.QueryString("Category") <> "") Then
> RSelectrical__MMColParam = Request.QueryString("Category")
> End If
> %>
> <%
> Dim RSelectrical
> Dim RSelectrical_cmd
> Dim RSelectrical_numRows
>
> Set RSelectrical_cmd = Server.CreateObject ("ADODB.Command")
> RSelectrical_cmd.ActiveConnection = MM_shoppingcart_STRING
> RSelectrical_cmd.CommandText = "SELECT Categories.Category,
> Products.ProductID, Products.CategoryID, Products.ManufacturerID,
> Products.ProductCode, Products.Product, Products.Description,
> Products.Image, Products.Price, Products.Break1, Products.Price2,
> Products.Break2, Products.Price3, Products.Break3, Products.InStock,
> Products.TimeKey,Products.Special FROM Categories INNER JOIN Products ON
> Categories.CategoryID = Products.CategoryID
> WHERE Products.CategoryID = ? ORDER BY Price ASC"
> RSelectrical_cmd.Prepared = true
> RSelectrical_cmd.Parameters.Append
> RSelectrical_cmd.CreateParameter("param1", 5, 1, -1,
> RSelectrical__MMColParam) ' adDouble
>
> Set RSelectrical = RSelectrical_cmd.Execute
> RSelectrical_numRows = 0
> %>
>


Inspiring
January 12, 2007
PS
I could uninstall DW and then re-install version 8, but this would onll
cause me problems in the future and at some point i would have to upgrade
anyway.

Thanks
Andy

"Andy" <me@work.com> wrote in message
news:eo7kkr$jk9$1@forums.macromedia.com...
> As i understand it - In version 8.02 the recordsets are created
> differently now! WHY??????
> Something to do with SQL injection problems.
>
> The problem is i can't get my sql to work now.
> I can't find any info on how to get my code to work now.
>
> I have this code below which uses INNER JOINS from an Access database.
> What i normally do is create the SQL in Access and then copy this into the
> recordset - worked fine.
>
> Now my code below doesn't work and doesn't show the recordset in DW.
>
> Can anyone help or advise me on how to get this working please ???
>
> Thanks
> Andy
>
> <%
> Dim RSelectrical__MMColParam
> RSelectrical__MMColParam = "0"
> If (Request.QueryString("Category") <> "") Then
> RSelectrical__MMColParam = Request.QueryString("Category")
> End If
> %>
> <%
> Dim RSelectrical
> Dim RSelectrical_cmd
> Dim RSelectrical_numRows
>
> Set RSelectrical_cmd = Server.CreateObject ("ADODB.Command")
> RSelectrical_cmd.ActiveConnection = MM_shoppingcart_STRING
> RSelectrical_cmd.CommandText = "SELECT Categories.Category,
> Products.ProductID, Products.CategoryID, Products.ManufacturerID,
> Products.ProductCode, Products.Product, Products.Description,
> Products.Image, Products.Price, Products.Break1, Products.Price2,
> Products.Break2, Products.Price3, Products.Break3, Products.InStock,
> Products.TimeKey,Products.Special FROM Categories INNER JOIN Products ON
> Categories.CategoryID = Products.CategoryID
> WHERE Products.CategoryID = ? ORDER BY Price ASC"
> RSelectrical_cmd.Prepared = true
> RSelectrical_cmd.Parameters.Append
> RSelectrical_cmd.CreateParameter("param1", 5, 1, -1,
> RSelectrical__MMColParam) ' adDouble
>
> Set RSelectrical = RSelectrical_cmd.Execute
> RSelectrical_numRows = 0
> %>
>