Posted By

jgmutza on 10/17/06


Tagged

article


Versions (?)

Using Parameterized Statements


 / Published in: ASP
 

Parameter markers are Da Bomb!

  1. dim MyColumn3Value: MyColumn3Value = "something stringy"
  2. ...
  3. dim sql: sql = "select Column1, Column2 from MyFavoriteTable where Column3 = ?"
  4. set rs = connection.Execute(sql, Array(MyColumn3Value))

Report this snippet  

You need to login to post a comment.