ASP Command Object Syntax Errors

[fiddlestyx]

I'm having difficulty using a straight-forward ASP/VBScript Command Object
generated by DMX04. The code is supposed to insert into a SQL Server 2000
table, not a stored procedure. Dreamweaver writes the code as follows:

<%

set cmdAttachAdd = Server.CreateObject("ADODB.Command")
cmdAttachAdd.ActiveConnection = connectionStringGoesHere
cmdAttachAdd.CommandText = "INSERT INTO dbo.tableName (entryID, fileName)
VALUES (" + Replace(cmdAttachAdd__varEntryID, "'", "''") + "," +
Replace(cmdAttachAdd__varFileName, "'", "''") + ") "
cmdAttachAdd.CommandType = 1
cmdAttachAdd.CommandTimeout = 0
cmdAttachAdd.Prepared = true
cmdAttachAdd.Execute()

%>

...plus the usual variable declarations, etc. The syntax error indicates that
the problem is in the CommandText, or SQL string. I've tried removing the
"Replace" function and using Chr(34) or other character substitutions instead
of the single quotes, but no luck.

Can anyone shed any light as to how to correct this?

Thanks.

[CMBergin]

What's your error?
In all liklihood, your parameter values don't exist. You have no single
quotes around the values, so they're numbers. If a number parameter doesn't
exist, then the statement will error out. If you pass a text string into a
number parameter, the statement will error out.

"fiddlestyx" <webforumsuser@macromedia.com> wrote in message
news:cv5evv$1o$1@forums.macromedia.com...

> I'm having difficulty using a straight-forward ASP/VBScript Command Object
> generated by DMX04. The code is supposed to insert into a SQL Server 2000
> table, not a stored procedure. Dreamweaver writes the code as follows:
>
> <%
>
> set cmdAttachAdd = Server.CreateObject("ADODB.Command")
> cmdAttachAdd.ActiveConnection = connectionStringGoesHere
> cmdAttachAdd.CommandText = "INSERT INTO dbo.tableName (entryID, fileName)
> VALUES (" + Replace(cmdAttachAdd__varEntryID, "'", "''") + "," +
> Replace(cmdAttachAdd__varFileName, "'", "''") + ") "
> cmdAttachAdd.CommandType = 1
> cmdAttachAdd.CommandTimeout = 0
> cmdAttachAdd.Prepared = true
> cmdAttachAdd.Execute()
>
> %>
>
> ...plus the usual variable declarations, etc. The syntax error indicates

that

> the problem is in the CommandText, or SQL string. I've tried removing the
> "Replace" function and using Chr(34) or other character substitutions

instead

> of the single quotes, but no luck.
>
> Can anyone shed any light as to how to correct this?
>
> Thanks.
>