Home/ Questions/Q 8423785
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T03:49:12+00:00

<html> <title>Test</title> <body bgcolor=FFFFFF> <% sort = CStr(Request(sort)) search = CStr(Request(search)) Set conn =

  • 0
<html>
<title>Test</title>
<body bgcolor="FFFFFF">

<%
sort = CStr(Request("sort"))
search = CStr(Request("search"))
Set conn = Server.CreateObject("ADODB.Connection")
conn.open "Provider=SQLOLEDB.1;Password=123;Persist Security Info=True;User   ID=sa;Initial Catalog=asdf;Data Source=WIN-123"

Set rs = Server.CreateObject("ADODB.Recordset")
If sort = "ascending" Then
SQL = "select top 50 * from asdf order by Name"
ElseIf (search Is Not Nothing)
SQL = "select * from asdf WHERE name = '" & search & "'"
Else
SQL = "select top 50 * from asdf"
End If
rs.open SQL, conn
%>
<center><form acion="index.asp">
Search Name:<input name="search" /><input type="submit" value="Submit" />
</form></center>

I’m getting an error on my 

Else If (search Is Not Nothing)

line, from what I can tell it should work. and of course I also cannot for some reason browse my site on my server to see what the actual error is.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Tested on my IIS 5, without option explicit, when you use

    search=CStr(Request("search"))

    your search has been initialized to string (VarType: 8).

    So even if search is “empty”, you can not use IsEmpty or similar function/statement to see if it’s empty. Use

    ElseIf search<>"" Then

    directly.

    Also, remember to sanitize your SQL queries…

    • 0