use bind variables.
Jim
"Teoh Tee Hui" <teohui_at_pl.jaring.my> wrote in message
news:a8facf$6pd$1_at_news6.jaring.my...
> Hi,
> I hope to get some replies...I am having trouble with oracle and asp
>
> strConn = "DRIVER={Microsoft ODBC for Oracle}; SERVER=POS.Retail;
> UID=teehui; PWD=abc123"
>
> if Len(Request.Form("cmdLogin"))then
> set conn = server.CreateObject ("adodb.connection")
> conn.ConnectionString = strConn
> conn.Open set RS = conn.Execute ("SELECT * FROM Staff " & _
> "WHERE StaffName = '" & txtUserName & "' and " & _ "Password = '" &
> txtPassword & "'")
> if RS.EOF or Request.Form("txtUserName")<>"" or
> Request.Form("txtPassword")<>"" then
> Response.Write "Invalid Login"
> else Response.Cookies ("Username") = Request.Form ("txtuserName")
> Response.Redirect "LoginRespond.asp"
> end if
> end if
>
> The connection between oracle and asp is ok...i think because I do not
have
> any errors but the thing is
> the rs.eof seems to be true all the time...it seems that no matter what i
> type inside i'll go to invalid login
> this includes the entries in my database...what is wrong? Is it my logic?
I
> don't think so...please someone
> help me...with this...it has been bothering me for a long time.....
>
>
> Tee Hui
>
>
Received on Wed Apr 03 2002 - 20:20:25 CST
