SQL strings for a form

[tazzer]

Hi,

I'm a first-time ASP user. I've created a search form which accepts a value belonging to a field called Surname which brings up a table of numbers. Is there any way to include the field FirstName in the SQL string so that a user must type in both surname and first name before getting the result? I've heard that InStrings are the answer but I can find no info on them.

My code used is;

sql = "SELECT * FROM Internal WHERE Surname LIKE '"
sql = sql & request.form ("txtSurname&quot & "%'"

Please help.

 

[Mighty]

If I understand you correctly, you want the user to enter the SURNAME and the FIRSTNAME and then search for records that match both of thm.

Get the user to enter the FIRSTNAME and then modify your SQL statement to the following:

sql = "SELECT * FROM Internal WHERE Surname LIKE '"
sql = sql & request.form ("txtSurname&quot & "%' AND"
sql = sql & "Firstname LIKE '" & request.form("txtFirstName&quot & "%'" Mise Le Meas,

Mighty

 

[RobV]

A good practice is to escape the arguments for your SQL statements so that the code doesn't crash when you substitute special characters in the argument.

E.g.

sql = sql & "Firstname LIKE '" & Replace(request.form("txtFirstName&quot, "'", "''&quot & "%'"
Yours,

Rob.