Professional Web Applications Themes

SQL - Updating Empty Text Field is enterring -1 - ASP Database

> "Update [Website Settings] set userid = '" & REquest.form("userid") & > "' and repid = '" & Request.form("repid") & "' where " & var1 & var2 > & var3 Response.write this to the screen, instead of executing it, and examine the result....

  1. #1

    Default Re: SQL - Updating Empty Text Field is enterring -1

    > "Update [Website Settings] set userid = '" & REquest.form("userid") &
    > "' and repid = '" & Request.form("repid") & "' where " & var1 & var2
    > & var3
    Response.write this to the screen, instead of executing it, and examine the
    result.


    Aaron Bertrand - MVP Guest

  2. #2

    Default Re: SQL - Updating Empty Text Field is enterring -1

    [posted and mailed, please reply in news]

    Scott Hoff (SHOFFFIRSTHEARTLAND.COM) writes:
    > However, when I update the empty fields in this table it places a -1
    > into the field rather than the enterred value.
    >...
    > "Update [Website Settings] set userid = '" & REquest.form("userid") &
    > "' and repid = '" & Request.form("repid") & "' where " & var1 & var2
    > & var3
    If that is all that happens, consider yourself lucky. A malicious
    user could use the above for SQL intrusion, and SQL Server to execute
    commands you sure did not intend him to. For a starter, enter
    O'Brien in userid.

    --
    Erland Sommarskog, SQL Server MVP, [email]sommaralgonet.se[/email]

    Books Online for SQL Server SP3 at
    [url]http://www.microsoft.com/sql/techinfo/productdoc/2000/books.asp[/url]
    Erland Sommarskog Guest

Similar Threads

  1. #39134 [NEW]: PHP + FreeTDS 0.64 crashes when TEXT field with empty string encountered
    By jr-phpbugs at cedric dot unob dot cz in forum PHP Bugs
    Replies: 6
    Last Post: November 1st, 09:49 AM
  2. Dynamic removal of text if field is empty using PHP
    By cp:fusion in forum Dreamweaver AppDev
    Replies: 7
    Last Post: April 8th, 10:00 PM
  3. Replies: 2
    Last Post: February 22nd, 04:59 PM
  4. Updating a text field in SQL Server 2000
    By Michael Walton in forum ASP Database
    Replies: 9
    Last Post: December 23rd, 01:54 PM
  5. Updating part of the text in an NTEXT field
    By Rocky in forum Microsoft SQL / MS SQL Server
    Replies: 4
    Last Post: July 10th, 02:29 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139