
July 14th, 2009, 03:16 PM
|
|
Registered User
|
|
Join Date: Jun 2009
Posts: 4
Time spent in forums: 30 m 5 sec
Reputation Power: 0
|
|
|
ASP 1.0 - Comparing Results From 2 Different Arrays (checkboxes)
I have two arrays which are values for checkboxes and I need to compare them on the next page when they get submited, The first array I created which is the checkbox values that were selected previously:
1st page:
Code:
<input type='checkbox' name="compare" value="131717"/>
<input type='checkbox' name="compare" value="131719"/>
2page.asp?compare=131717&compare=131719
i did try to use this script
Code:
<% Dim Connection, Recordset
Dim sSQL, sConnString, iColumnSpan
sSQL="SELECT * FROM news WHERE newsid IN (" & Replace( Request.QueryString("compare"), "'", "''") & ")"
sConnString="Provider=SQLOLEDB.1;......."
Set connection = Server.CreateObject("ADODB.Connection")
Set recordset = Server.CreateObject("ADODB.Recordset")
connection.Open sConnString
recordset.Open sSQL,connection
If Recordset.EOF Then
Response.Write("No records returned.")
Else
Response.write "<table width=""100%"" border=""1"">" %>
But i am vulnerable to sql injection using this method.
Any Help Thank you
|