2 svar · 365 visningar · startad av reka1
Hej!
Jag vill göra en söka i två kolumner (strAd, strTown) från samma textfält (searchword).
Men det vill sig inte riktigt hur jag än laborerar.
(Access används)
set rs = con.execute ("SELECT id, strName, strTown, strAd, strPub, inDate, intHeadline FROM ads WHERE strAd like '%"&trim(request.form("searchword"))&"%' OR strTown like '%"&trim(request.form("searchword"))&"%' AND intHeadline = "&request.form("headline")&" AND intCounty = "&request.form("county")&" AND intCat = "&(request.form("category")) &" AND strPub = 'x' ORDER BY strTown desc")
set rs = con.execute ( & _
"SELECT id, strName, strTown, strAd, strPub, inDate, intHeadline " & _
" FROM ads " & _
" WHERE (strAd like '%"&trim(request.form("searchword"))&"%' " & _
" OR strTown like '%"&trim(request.form("searchword"))&"%' )" & _
" AND intHeadline = "&request.form("headline")&" & _
" AND intCounty = "&request.form("county")&" & _
" AND intCat = "&(request.form("category")) &" & _
" AND strPub = 'x' " & _
" ORDER BY strTown desc")
Osså var det det här med sql injection.
Tack så mycket :)
Jo, sitter & läser om sql-injections nu :r