新三板 创新层市值:请求一个sql server数据库方面的

来源:百度文库 编辑:杭州交通信息网 时间:2024/05/09 14:55:07
<!--#include file="db.asp"-->

<%
validpwd = true

If request.form("submit") <> "" Then

' setup variables
userid = Request.Form("userid")
passwd = Request.Form("passwd")

Set conn = Server.CreateObject("ADODB.Connection")
conn.open(dbConnStr)
Set rs = conn.Execute( "Select * from [admin] where [user_id] = '" & UCASE(userid) & "'")
If not rs.eof then
If ucase(rs("user_pwd")) = ucase(passwd) Then
validpwd = true
Else
validpwd = false
End If
Else
validpwd = false
end if
lev=rs("lev")
user=rs("user_id")
rs.Close
Set rs=Nothing
conn.Close
Set conn=Nothing

If validpwd Then
Session("exemple_status") = "login"
session("lev")=lev
session("u_id")=user
response.redirect "default.asp"
End If

End If
%>

请帮我看一下,那里出错了
好像是
Set rs = conn.Execute( "Select * from [admin] where [user_id] = '" & UCASE(userid) & "'")

请确定user_id的数据类型。user_id应该是是数值,你的程序用引号,这就是按字符型处理,当然会错,应该改成:
Set rs = conn.Execute( "Select * from [admin] where [user_id] = " & UCASE(userid) )

你把Select * from [admin] where [user_id] = '" & UCASE(userid) & "'")弄到查询分析器运行看看是否有错就知道了.记得赋值上去.

发错误信息上来!

地二个对啊