breaking a string

[amatuer]

I usesd this to display info on a page:
<% While not rstMain.eof %>
<tr>
<td><font size="-1"><%= rstMain("Datum") %></font></td>
<!-- <td><font size="-1"><b>Client no</b></font></td> -->
<td><font size="-1"><%= rstMain("Act") %></font></td>
<td><font size="-1"><%= rstMain("Item") %></font></td>
<td><font size="-1"><input type="checkbox" name="Inv" id="Inv"
value="<%= rstMain("TR_ID") %>"></font></td>
</tr>
<% rstMain.movenext
Wend%>

on the next page i want the data from the checkbox.it comes as a
string,numerics concatanated with a ","

i want to query according to this checkbox n tried this code:

For i=1 to (len(request.form("Inv")))
If left(request.form("Inv"),i) = "," Then
count = count + 1
End If
Next

'For i=1 to count do
'var1=instr(request.form("Inv"),",")

'sql="SELECT * From V_Transaksie Where ID=" &
left(request.form("Inv"),var1-1)
'set rstMain = CreateObject("ADODB.Recordset")
'rstMain.Open sql, "Provider=SQLOLEDB.1;Persist Security
Info=False;User ID=sa;password=admin@sql;Initial Catalog=GIS;Data
Source=172.16.4.180",1,4
All above ASP.Please help

[Mike Brind]

amatuer wrote:

I usesd this to display info on a page:
<% While not rstMain.eof %>
<tr>
<td><font size="-1"><%= rstMain("Datum") %></font></td>
<!-- <td><font size="-1"><b>Client no</b></font></td> -->
<td><font size="-1"><%= rstMain("Act") %></font></td>
<td><font size="-1"><%= rstMain("Item") %></font></td>
<td><font size="-1"><input type="checkbox" name="Inv" id="Inv"
value="<%= rstMain("TR_ID") %>"></font></td>
</tr>
<% rstMain.movenext
Wend%>

on the next page i want the data from the checkbox.it comes as a
string,numerics concatanated with a ","

i want to query according to this checkbox n tried this code:

For i=1 to (len(request.form("Inv")))
If left(request.form("Inv"),i) = "," Then
count = count + 1
End If
Next

'For i=1 to count do
'var1=instr(request.form("Inv"),",")

'sql="SELECT * From V_Transaksie Where ID=" &
left(request.form("Inv"),var1-1)
'set rstMain = CreateObject("ADODB.Recordset")
'rstMain.Open sql, "Provider=SQLOLEDB.1;Persist Security
Info=False;User ID=sa;password=admin@sql;Initial Catalog=GIS;Data
Source=172.16.4.180",1,4
All above ASP.Please help

You need to use the split() function:

checkboxes = split(Request.Form("Inv"),",")

This returns a one-dimensional array called checkboxes, with the first
index being zero. So to iterate through it:

For i = 0 to Ubound(checkboxes)
...do some stuff with the current checkbox - which is checkboxes(i)
Next

--
Mike Brind

[amatuer]

Thanx i gt the var to split the numerics
bt nw i need to use these numerics in a query:

eg:
sql="SELECT * From V_Transaksie Where ID=" & 22 & "Or ID=" & 23
I need a way to find out hw many commas in the original var and hw many
"or" statements to add

[Mike Brind]

amatuer wrote:

Thanx i gt the var to split the numerics
bt nw i need to use these numerics in a query:

eg:
sql="SELECT * From V_Transaksie Where ID=" & 22 & "Or ID=" & 23
I need a way to find out hw many commas in the original var and hw many
"or" statements to add

No you don't. Use the SQL IN clause.

sql="SELECT * From V_Transaksie WHERE ID IN(" & Request.Form("Inv") &
")"

--
Mike Brind

[amatuer]

thanx Mike, i displayed the query and it looks like it'l work

[Mike Brind]

amatuer wrote:

thanx Mike, i displayed the query and it looks like it'l work

No problem. By the way, if you ever did need to know how many values
there are in the array created by split(), Ubound(array) +1 will tell
you.

--
Mike Brind

[Anthony Jones]

"Mike Brind" <pa*******@hotmail.com> wrote in message
news:11*********************@g10g2000cwb.googlegro ups.com...

amatuer wrote:

Thanx i gt the var to split the numerics
bt nw i need to use these numerics in a query:

eg:
sql="SELECT * From V_Transaksie Where ID=" & 22 & "Or ID=" & 23
I need a way to find out hw many commas in the original var and hw many
"or" statements to add

No you don't. Use the SQL IN clause.

sql="SELECT * From V_Transaksie WHERE ID IN(" & Request.Form("Inv") &
")"

--
Mike Brind

Request.Form("Inv") needs to be vetted to ensure it doesn't contain
malicious SQL.

http://www.tech-faq.com/sql-injection-attack.shtml

Anthony