Easy string problem: invalid syntax????

[.Net Sports]

I get an incorrect syntax error pointing to the semicolon when I run
this sql statement with a dynamic querystring (geid is primary key
integer datatype):

sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"
...i've tried every possible combination, obviously breaking syntax
rules, and keep getting the error pointing to either the ; or the =

???????
netsports

[Mike Brind]

".Net Sports" <ba********@cox.netwrote in message
news:11**********************@p10g2000cwp.googlegr oups.com...

>I get an incorrect syntax error pointing to the semicolon when I run
this sql statement with a dynamic querystring (geid is primary key
integer datatype):

sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"
..i've tried every possible combination, obviously breaking syntax
rules, and keep getting the error pointing to either the ; or the =

???????
netsports

Have you established that Request.QueryString("id") holds a valid value?
<%
sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"
Response.Write sql
Response.End
%>

--
Mike Brind

[Pav]

On Feb 8, 11:10 pm, ".Net Sports" <[e-mail]:

I get an incorrect syntax error pointing to the semicolon when I run
this sql statement with a dynamic querystring (geid is primary key
integer datatype):

sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"

..i've tried every possible combination, obviously breaking syntax
rules, and keep getting the error pointing to either the ; or the =

???????
netsports

Can you use it like this

Dim sID
sID=request.QueryString("id")

sql="SELECT firstname,lastname from general where geid = ' "&sID&" '
". <Remove space between double quote and single quote>

[Evertjan.]

Pav wrote on 08 feb 2007 in microsoft.public.inetserver.asp.general:

On Feb 8, 11:10 pm, ".Net Sports" <[e-mail]:

>I get an incorrect syntax error pointing to the semicolon when I run
this sql statement with a dynamic querystring (geid is primary key
integer datatype):

sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"

..i've tried every possible combination, obviously breaking syntax
rules, and keep getting the error pointing to either the ; or the =

???????
netsports

Can you use it like this

Dim sID
sID=request.QueryString("id")

sql="SELECT firstname,lastname from general where geid = ' "&sID&" '
". <Remove space between double quote and single quote>

.... and just when it works this is so VERY DANGEROUS,
as putting a request.QueryString() value directly into a SQL string
without thorough validation, is inviting being severely hacked by sql-
injection, puting your whole database for the hacking world to duplicate,
change and destroy. And sometimes even to allow the hacker to insert a
shell command in the string and opening your HD drives to him.
[.. or her. Are there female hackers btw?]
--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Bob Lehmann]

Why don't you just leave off the ; ?

Bob Lehmann

".Net Sports" <ba********@cox.netwrote in message
news:11**********************@p10g2000cwp.googlegr oups.com...

I get an incorrect syntax error pointing to the semicolon when I run
this sql statement with a dynamic querystring (geid is primary key
integer datatype):

sql="SELECT firstname,lastname from general where geid = " &
request.QueryString("id") & ";"
..i've tried every possible combination, obviously breaking syntax
rules, and keep getting the error pointing to either the ; or the =

???????
netsports

[Roland Hall]

"Evertjan." <ex**************@interxnl.netwrote in message
news:Xn********************@194.109.133.242...

[.. or her. Are there female hackers btw?]

No. Only wives and girlfriends of hackers who can often be heard asking,
"When are you going to get off that
@#$% COMPUTER?"
--
Roland Hall

[Evertjan.]

Roland Hall wrote on 12 feb 2007 in

"Evertjan." <ex**************@interxnl.netwrote in message

>[.. or her. Are there female hackers btw?]

No. Only wives and girlfriends of hackers who can often be heard
asking, "When are you going to get off that
@#$% COMPUTER?"

Evidently from personal experience, Roland.

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Mike Brind]

"Roland Hall" <nobody@nowherewrote in message
news:%2****************@TK2MSFTNGP04.phx.gbl...

"Evertjan." <ex**************@interxnl.netwrote in message
news:Xn********************@194.109.133.242...

>[.. or her. Are there female hackers btw?]

No. Only wives and girlfriends of hackers who can often be heard asking,
"When are you going to get off that
@#$% COMPUTER?"

Sorry. I do not believe that for one second.

There is absolutely NO WAY that any half decent hacker would leave their
computer long enough to expose themselves to the possibility of meeting
someone of the opposite sex.

You are mistaking hackers for developers, I reckon.

[Roland Hall]

"Evertjan." <ex**************@interxnl.netwrote in message
news:Xn********************@194.109.133.242...

Roland Hall wrote on 12 feb 2007 in

>"Evertjan." <ex**************@interxnl.netwrote in message

>>[.. or her. Are there female hackers btw?]

No. Only wives and girlfriends of hackers who can often be heard
asking, "When are you going to get off that
@#$% COMPUTER?"

Evidently from personal experience, Roland.

Evidently, although my hat is gray! (O;=

--
Roland Hall

[Roland Hall]

"Mike Brind" <du***@newsgroups.comwrote in message
news:u2**************@TK2MSFTNGP02.phx.gbl...

>
"Roland Hall" <nobody@nowherewrote in message
news:%2****************@TK2MSFTNGP04.phx.gbl...

>"Evertjan." <ex**************@interxnl.netwrote in message
news:Xn********************@194.109.133.242...

>>[.. or her. Are there female hackers btw?]

No. Only wives and girlfriends of hackers who can often be heard asking,
"When are you going to get off that
@#$% COMPUTER?"

Sorry. I do not believe that for one second.

There is absolutely NO WAY that any half decent hacker would leave their
computer long enough to expose themselves to the possibility of meeting
someone of the opposite sex.

You are mistaking hackers for developers, I reckon.

Pr( * Y * )n & h3x1n g0 2g3th3r

--
Roland Hall