Contents of binsert.asp:
<html> <body bgcolor="#cccccc"> <table border="1"> <tr><td valign='middle' bgcolor='#999999'><img src="captsm.gif"></td> <td valign='middle' bgcolor='#999999'><center><font color="#ffffff"><font face="Comic Sans MS"> <br> <b>A Simple ASP Example<br>Insert</b> <br> </td></tr></table> </center> <p> <font face="Comic Sans MS"><b> <p> Execution begins... <p> <% ' '*** globals ' dim cn dim rs dim tokenvalue sub pass1 %> <p>Pass 1 <p> <form name="badgeform" action="http://disc-nt.cba.uh.edu/students/parks/binsert.asp" METHOD="POST"> Badge ID <input type="text" size="10" name="ubid"><p> Badge Location <input type="text" size="1" name="ubloc"><p> First Name<input type="text" size="10" name="ubfirstname"><p> Last Name<input type="text" size="10" name="ublastname"> <input type="hidden" name="token" value="2"><p> <input type="submit"> </form> <% end sub sub pass2 response.write "<P>Pass 2 tokenvalue="+cstr(tokenvalue) set cn=Server.CreateObject("ADODB.Connection") cn.open "gl001","gl001","11111" response.write "<P>Connection created OK" set rs=Server.CreateObject("ADODB.Recordset") bidvalue=request.form("ubid") SQLString="SELECT * FROM badge WHERE bid="+cstr(bidvalue) response.write "<P>Opening badge rs with SQL--->"+cstr(SQLString)+"<------ " rs.open SQLString,"DSN=gl001;UID=gl001;PWD=11111;" response.write "<P>Recordset opened OK" c=0 while NOT rs.EOF c=c+1 rs.movenext wend rs.close set rs=nothing response.write "<P>Existence for bid = "+cstr("bidvalue") if c=0 then response.write ": Found "+cstr(c)+" records. Proceeding with Insert" SQLString="INSERT INTO badge " SQLString=SQLString+"(bid,bloc,blastname,bfirstname) VALUES (" SQLString=SQLString+ request.form("ubid") +"," SQLString=SQLString+ chr(39)+request.form("ubloc") +chr(39)+"," SQLString=SQLString+ chr(39)+request.form("ublastname") +chr(39)+"," SQLString=SQLString+ chr(39)+request.form("ubfirstname") +chr(39)+")" response.write "<P>Ready for Insert with SQLString="+cstr(SQLString) cn.execute SQLString,numa if numa=1 then response.write "<P>Inserted OK numa="+cstr(numa) else response.write "<P>Insert Failed. Number of records inserted="+cstr(numa) end if cn.close set cn=nothing response.write "<P>Terminating normally" else if c=1 then response.write ": Found "+cstr(c)+" records. No insert will be performed. Duplicate key" else response.write "<P>Found "+cstr(c)+" records. No Insert will be performed. More than one reocrd with this bid found" end if end if end sub sub passerror response.write "<p>INVALID TOKEN VALUE. token="+cstr(tokernvalue) end sub ' '*** top of main ' tokenvalue=request.form("token") select case tokenvalue case "" call pass1 case "2" call pass2 case else call passerror end select %> </body> </html>
***** end of file *** printed: 113 lines on: 11/23/2009 5:55:35 AM