ASP - question ...

[jake]

I building a guestbook for my funeral home. I hope to construct a
guestbook for people to sign for the different obituaries on the site.


I built on with PHP...and MySQL, but our website is being moved to a MS
Hosting. So hence, my quest to learn ASP or ASP.Net...

Form Fields
DName - Deceased name
Sender - Senders Name
Comments - Comments
Email - Email

Those are the fields... I would like the form to be filled out and then
the person taken directly to a page listing all the entries for that
person.

I have just about everything... but need help with the SQL statement to
query the DName

Your help is apprecaited

 

[Scott M.]

"SELECT DName, Sender, Comments, Email FROM yourSQLtableNameHere WHERE DName
=" & formFieldNameThatContainsTheDeceasedName

 

[Lucas Tam]

"SELECT DName, Sender, Comments, Email FROM yourSQLtableNameHere WHERE
DName =" & formFieldNameThatContainsTheDeceasedName

To the original poster, take a look at SQLParameters - because someone
could do a SQL injection attack with the above statement.