中直机关案件北戴河:asp问题,很急

来源:百度文库 编辑:杭州交通信息网 时间:2024/05/05 19:39:47
sqlstr="select pwd,logintimes from user where sqlstr="sqlstr &"username like'"& username &"'" 为什么总是提示 Microsoft VBScript 编译器错误 (0x800A0401)
语句未结束
主要代码
<% @ language="vbscript"%>
<% Option Explicit %>
<!--#include file="dbconn.inc"-->
<% dim username,pwd,errmsg
Dim objrs,sqlstr
username=Trim(request("username"))
pwd=Trim(request("pwd"))
If username="" Then errmsg="未填写用户名"
If pwd="" Then errmsg="未填写密码"
If IsEmpty(errmsg) Then
If username="guest" Then
outputcookies
else
Set objrs=server.CreateObject("adodb.recordset")
sqlstr="select pwd,logintimes from user where sqlstr="sqlstr &"username like'"& username &"'"
objrs.open sqlstr,objconn,1,3
If objrs.eof Then
errmsg="没有该用户"
ElseIf objrs("pwd")<>pwd Then
errmsg="密码错误"
Else
logintimes=objrs("logintimes")+1
objrs("logintimes")=logintimes
objrs.update
outputcookies
%>
<!--#include file="endconn.inc"-->
<% End If
End If
End If
If IsEmpty(errmsg) Then response.redirect("chatroom.asp")
%>

是你的SQL语句有问题:

sqlstr="select pwd,logintimes from user where sqlstr="sqlstr &"username like'"& username &"'"

改为:

sqlstr="select pwd,logintimes from user where " sqlstr=sqlstr & "username like'"& username &"'"

="sqlstr &"username like'"& username &"'这里错了。把它放在一个变量里,再连接到sqlstr="select pwd,logintimes from user where sqlstr=里试试·

sqlstr="select pwd,logintimes from user where "&sqlstr & " username like '%"& username &"%'"