im trying to make a page that reads simple user information and posts
them to a table. the user can edit, delete and add new records, through
a form on the page.using SQLs modifications like insert and delete, how
would you go about doing this. the script executes an if then statment
that tests a submit button and initiates the insert portion of the SQL
statement .
here is the code i have so far
<% Option Explicit %>
<!--#include file="DatabaseC onnect2.asp"-->
<!--#include virtual="/06Winter/levini/database/adovbs.inc"-->
<html>
<head><title>Us ing SQL to List, Insert & Delete Data</title></head>
<body>
<center>
<h3>Using SQL to List, Insert & Delete Data</h3>
Please enter a name:
<form>
<table>
<tr>
<td>
First Name:
</td>
<td>
<input type="textbox" name="strFirstN ame" size="20">
</td>
</tr>
<tr>
<td>
Last Name:
</td>
<td>
<input type="textbox" name="strLastNa me" size="20">
<input type="submit" Name="AddName" text="Add Name"
Value="Add Person">
</td>
</tr>
</table>
</form>
<table border='1' cellpadding='3' cellspacing='0'
bordercolor='#B BDBE6'>
<tr>
<td><b>ID</b></td>
<td><b>First Name</b></td>
<td><b>Last Name</b></td>
<td><b>Delete </b></td>
</tr>
<%
dim objRS, strSQL, strLastName, strFirstName
function CleanIn(strIn)
strIn = replace(strIn, "'", " ")
CleanIn = replace(strIn, "<", " ")
end function
strFirstName = Request.queryst ring("strFirstN ame")
strLastName = Request.queryst ring("strLastNa me")
'Create a recordset object and execute the SQL statement
Set objRS = Server.CreateOb ject("ADODB.Rec ordset")
strSQL = "SELECT tblNames.Person ID, tblNames.strFir stName,
tblNames.strLas tName " & _
"FROM tblNames " & _
"ORDER BY tblNames.Person ID "
objRS.Open strSQL, objConn
if request.queryst ring ("Add Name") > " " then
strSQL = "INSERT INTO tblNames (strFirstName, strLastName) " & _
"VALUES (CleanIn)('strF irstName')('str LastName')"
objRS.Open strSQL, objConn
end if
response.write( "<TR><TD>" & objRS("PersonID ") & "</TD>")
response.write( "<TD>" & objRS("strFirst Name") & "</TD>")
response.write( "<TD>" & objRS("strLastN ame") & "</TD>")
response.write( "<TD><a href='SQLInsert Delete.asp?Dele teID=" &
objRS("PersonID ") & "'>Delete</a></TD></table>")
response.write "strSQL=" & strSQL & "<br>"
%>
</body>
</html>
