I inherited this code, I am not a coder but have had some kind of hack and am looking at code to reduce its vulnerability. At the top of the page I have
Expand|Select|Wrap|Line Numbers
- nPage = CLng(Request.QueryString("Page"))
- Keyword = Trim(Request.QueryString("Keyword"))
Expand|Select|Wrap|Line Numbers
- p.area LIKE '%" & Replace(Keyword, "_", " ") & "%'
Expand|Select|Wrap|Line Numbers
- p.area LIKE '%" & Replace(Keyword, "'", "''") & "%'
Thanks for any advice.
Richard