我下面这代码为什么会出现 语法错误 (操作符丢失) 在查询表达
错误呢
我实验过,如果只有一个
set rs=server.createobject("adodb.recordset")
sql="select * from [user] where name='"&usernames&"' and password='"&passwordmd5&"'"
的话没问题!
怎么解决呢?
还有我想知道这个有没有更加简洁的办法写这段代码,帮帮忙啊!
<!--#include file="inc/md5.asp"-->
<%
usernames=request("usernames")
passwords=request("password")
passwordmd5=md5(passwords)
userid=request("userid")
leix=request("leix")
ms=request("ms")
wartime=request("wartime")
times=request("times")
names=request("name")
tzpt=request("tzpt")
gamever=request("gamever")
tzsay=request("tzsay")
set rs=server.createobject("adodb.recordset")
sql="select * from [user] where name='"&usernames&"' and password='"&passwordmd5&"'"
rs.open sql,conn,1,1
if not rs.eof then
name=rs("name")
warid=rs("warid")
groupname=rs("groupname")
rs.close
set rs=nothing
set rs1=server.createobject("ADODB.RECORDSET")
sql1="select * form [user] where name="&names
rs1.open sql1,conn,1,1
warname=rs1("name")
wargroupname=rs1("groupname")
warwarid=rs1("warid")
%>
<%=name%><%=warid%><%=groupname%><BR><%=warname%><%=warwarid%><%=wargroupname%>
<%else%>
密码错误
<%end if%>
參考答案:sql1="select * form [user] where name="&names
改为
sql1="select * form [user] where name='"&names