Re: FN-FORUM: (Orginally No Subject)

date posted 1st November 2003 10:18

Hi,
Sorry - I had realised that I had got two single quotes in that example.
I had already tried with one quote either side and got the same problem. It
seems to be something to do with single quotes. I am changing it to a post
anyway but I just curious as to why.

Pam


----- Original Message -----
From: "Alan Sheppard" [EMAIL REMOVED]
To: [EMAIL REMOVED]
Sent: Friday, October 31, 2003 11:52 PM
Subject: RE: FN-FORUM: (Orginally No Subject)


>
> Pam
>
> I think the problem lies with the %27%27chgtest240903.....
>
> The %27%27 is TWO single quotes NOT a Double Quote - are you sure this is
> what you want to send as this combination can have special meanings
> depending on what is evaluating it.
>
> If it's tageting SQL then it should just be AgentCode='chqtest240903'
which
> url encoded becomes:
>
> Agentcode%3d%27chqtest240903%27
>
> HTH
>
> Alan S
>
> On 31 October 2003 21:37, PAMELA WHITTAKER [EMAIL REMOVED]
> wrote:
> >
> > Hi,
> > Can any one see what is wrong with this please
> >
> > I have the following in the address line
> >
> >
> http://www.insurance4brokers.co.uk/orderview/search_main.asp?strsql=set+
> dateformat+dmy%3BSelect+%2A+from+%5BOrder%5D+where+AgentCode%3D%27%27chg
> test240903%27%27+order+by+CONVERT%28DateTime%2CIssue%5FDate%29
> >
> >
> > When I do a response.write on strsql I only get the following instead of
> the
> > full string : -
> > set dateformat dmy;Select * from [Order] where AgentCode=
> >
> >
> > This is causing the following error :-
> >
> > Microsoft OLE DB Provider for SQL Server error '80040e14'
> >
> > Line 1: Incorrect syntax near '='
> > orderview/search_details.asp line 27
> >
> > Why is strsql finishing after the "=" and doesn't contain the full query
> > string that is being passed..
> >
> > Thanks
> > Pam
> >
> >
> > ==========
> > redmail.com - webmail with a difference!
> > 10Mb for just GBP 9.99 a year. Launch special 1Gb for GBP 99.99 a year
> > IMAP, POP3, Spam Filtering and Anti Virus as standard.
> > Visit http://www.redmail.com/?fl-signup to join.
> >
> > To advertise here: http://www.freelancers.net/advertising.html
> >
> >
> ==========
> redmail.com - webmail with a difference!
> 10Mb for just GBP 9.99 a year. Launch special 1Gb for GBP 99.99 a year
> IMAP, POP3, Spam Filtering and Anti Virus as standard.
> Visit http://www.redmail.com/?fl-signup to join.
>
> To advertise here: http://www.freelancers.net/advertising.html
>
>