ASP访问带多个参数的存储过程- ASP - 软晨网（RuanChen.com）

当前位置: 首页 > 图文教程 > 网络编程 > ASP > ASP访问带多个参数的存储过程

技术文章搜索

关键字

ASP访问带多个参数的存储过程

出处:互联网 整理: 软晨网（RuanChen.com） 发布: 2009-08-14 浏览: 253 ::

收藏到网摘: n/a

ASP程序漏洞解析及黑客入侵防范方法用ASP和SQL语句动态的创建Access表

1.ACCESS

查询(query_info):

select * from info where stu = name1 and age = age1

ASP代码:

以下为引用的内容：

Dim conn,comm,rs
Set conn = Server.CreateObject("ADODB.Connection")
Set comm = Server.CreateObject("ADODB.Command")
conn.open "Driver={Microsoft Access Driver (*.mdb)};Dbq=" & Server.MapPath("db1.mdb")
comm.Parameters.Append comm.CreateParameter("name1",200,1,100,"张三")
comm.Parameters.Append comm.CreateParameter("age1",200,1,100,"25")
comm.ActiveConnection = conn
comm.CommandType = 4
comm.CommandText = "query_info"
Set rs = comm.Execute
If not rs.eof Then
Response.Write(rs(1))
End if
Set rs = nothing
Set comm = nothing
conn.close
Set conn = nothing

2.SQL Server:

存储过程(query_info):

以下为引用的内容：

@name1 varchar(20) ="张三",
@age1 int = 25
AS
Select * from info where stu=@name1 and age = @age1
GO

ASP代码:

以下为引用的内容：

Set objConn = Server.CreateObject("ADODB.Connection")
objConn.open "Driver={SQL Server};server=(local);uid=sa;pwd=txwl006;database=tempdb;"
Set objComm = Server.CreateObject("adodb.command")
objComm.Parameters.append objComm.CreateParameter("@name1",200,1,50,"李四")
objComm.Parameters.append objComm.CreateParameter("@age1",200,1,50,32)
objComm.CommandType = 4
objComm.ActiveConnection = objConn
objComm.CommandText = "query_info"
Set objRs = objComm.execute
If not objRs.eof Then
Response.write objRs(1)
End if
Set objRs = Nothing
Set objComm = Nothing
objConn.close
Set objConn = nothing

ASP程序漏洞解析及黑客入侵防范方法用ASP和SQL语句动态的创建Access表

ASP访问带多个参数的存储过程

评论 (0) All