How to change form input text data from ASP by using ASP variable ?

Question

0.00/5 (No votes)

See more:

C#

IDs = Request.Form ("IDs")

Function fixQuotes(theString)
fixQuotes=Replace(theString, "'", "''")
End Function

IDs=fixQuotes(IDs)

C#

Set oConn = Server.CreateObject("ADODB.Connection")

oConn.Open  "Driver={Microsoft Access Driver (*.mdb)};" & _
            "Dbq=" & Server.MapPath("db\Register.mdb") & ";" & _
            "Uid=admin;" & _
            "Pwd=;"

C#

mySQL = "SELECT * FROM customer WHERE IDs = '" & IDs & "' ;"

Set oRS = oConn.Execute (mySQL)
Response.Write("<table align=center cellpadding=5 cellspacing=0 border=1 >")
Do Until oRS.EOF
    Response.Write "<tr>"
    Response.Write "<td>"
    Response.Write oRS.Fields("address").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("Bdate").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("firstname").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("lastname").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("email").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("sex").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("phone").Value
    Response.Write "</td>"
    Response.Write "<td>"
    Response.Write oRS.Fields("IDs").Value
---> Response.Write.Form("IDs").Value = oRS.Fields("IDs").Value
    Response.Write "</td>"
    oRS.MoveNext
    Response.Write "</tr>"
Loop
Response.Write("</table>")


oRS.Close
Set oRS = Nothing

oConn.Close
Set oConn = Nothing

i want to change the field id in the form by using asp variable
i using sql query because i search this id its woeking but when its go to this line

C#

Response.Write.Form("IDs").Value = oRS.Fields("IDs").Value

i got error all the

so how can i do that?

What I have tried:

i tried this option but i got error too
that say dont much variable and it dont recognize the object :

Response.Write.Form("IDs").Value = oRS.Fields("IDs").Value

Response.Form("IDs").Value = oRS.Fields("IDs").Value

Form("IDs").Value = oRS.Fields("IDs").Value

Request.Form("IDs").Value = oRS.Fields("IDs").Value

Request.Write.Form("IDs").Value = oRS.Fields("IDs").Value

Posted 1-Apr-16 0:47am

komokom

Updated 1-Apr-16 1:23am

v2

Add a Solution

Comments

Richard Deeming 1-Apr-16 9:24am

Your code is vulnerable to SQL Injection[^]. NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Wombaticus · Accepted Answer · 2016-04-01T01:23:00

Solution 1

Delete the offending line above, and write your textbox where you want the values to appear as:

HTML

<input type="text" id="IDs" value="<%=oRS("IDs")%>" />

Posted 1-Apr-16 1:23am

Wombaticus

Updated 1-Apr-16 1:24am

v3

Comments

komokom 1-Apr-16 7:27am

i dont understand you can give me example of it ?

Wombaticus 1-Apr-16 7:34am

I've given you one! But I was assuming you have a textbox somewhere on the page that you want filled with the ID values. Then you do that as I said. If you want to create your textbox in the table using the Response.Write then you need to do that:
Response.Write "<input type=""text"" id=""IDs"" value="""
Response.Write oRS(IDs)
Response.Write """ />"

komokom 1-Apr-16 7:41am

ohhhhhhhhhh now i get this ty very much :)