Wayne,
Is this code running inline (actually in the ASPX page) or are you
using a codebehind or dll?
One note i would make on a security stand point would be that you shouldn't
concatenate strings together from user input and then execute that against
the database. This leads to injections issues (potential hacks). But on to
the question asked.
I think its just a position of your &'s and an extra ". Its hard to
tell though unless I know if this is inline or not.
Your Code:
strSQL = "UPDATE judgeevaluations Set scoring = ??, Set dialog = ??" _
& " Where (judgename = '" &
<%#Container.DataItem("JudgeName")%> & "')" _ <=== Error points to here
& " AND (caption = '" & <%#Container.DataItem("caption")%>
& "')" _
& " AND evaluator = " & Session ("EvaluatorID")" <====Is
this an extra "
To work needs to be:
strSQL = "UPDATE judgeevaluations Set scoring = ??, Set dialog = ??" & _
" Where (judgename = '" &
<%#Container.DataItem("JudgeName")%> & "')" & _
" AND (caption = '" & <%#Container.DataItem("caption")%> &
"')" & _
" AND evaluator = " & Session ("EvaluatorID")
Hope this helps,
--
Duane Laflotte
MCSE, MCSD, MCDBA, MCSA, MCT, MCP+I
dl*******@criticalsites.com http://www.criticalsites.com/dlaflotte
"Wayne Wengert" <wa***********@wengert.org> wrote in message
news:OF*************@TK2MSFTNGP12.phx.gbl...
I have an aspx page (built in WebMatrix) with the code shown below but
when I run it if gives an error "Expression Expected" pointing to the first DB
call. It is as if the calls to the DB values - "<%#Container..." are not
understood?
This really did run last year (we on on a new ISP now but I don't see that
as causing a problem?)
Any suggestions are most welcome.
============= Code ==================
Function UpdateRecord(e, jn, c)
' e is evaluator NameID
' jn is Judge's Name
' c is caption
Dim strSQL as String
strSQL = "UPDATE judgeevaluations Set scoring = ??, Set dialog = ??" _
& " Where (judgename = '" &
<%#Container.DataItem("JudgeName")%> & "')" _ <=== Error points to here
& " AND (caption = '" & <%#Container.DataItem("caption")%>
& "')" _
& " AND evaluator = " & Session ("EvaluatorID")"
Dim connEval As OleDBConnection
Dim cmdUpdate As OLEDBCommand
connEval = New OleDBConnection( "Server=myServer;
UID=myID;PWD=****;database=DB_12345" )
cmdUpdate = New OleDBCommand(strSQL, connEval)
connEval.Open
cmdUpdate.ExecuteNonQuery
connEval.Close
End Function
