'"& RS("username") &"'

Hejsa
Jeg har lavet en login side:

<%@ Language=VBScript %>
<%

If Request.Form("Action") = "Login" Then
   
    strID = Trim(Replace(Request.Form("Username"),"'",""))
    strPWD = Trim(Replace(Request.Form("Password"),"'",""))

   
    If Len(strID) > 0 And Len(strPWD) > 0 Then

       
        Set myConn = Server.CreateObject("ADODB.Connection")
        myConn.Open "DRIVER={Microsoft Access Driver (*.mdb)};DBQ=" & Server.MapPath("database/db.mdb")
       

        strSQL = "SELECT * FROM Users"&_
            " WHERE (Username = '" & strID & "')"&_
            " AND (Password = '" & strPWD & "')"

        Set rs = myConn.Execute(strSQL)
        If Not (rs.BOF Or rs.EOF) Then
           
            intID = rs("ID")
            strlevel = rs("Access_Level")
        Else
           
            strERR = "<H2>HTTP Error 401</H2>"
        End If

        myConn.Close
        Set myConn = Nothing

        If Len(intID) Then
            Session("ID") = intID
            Session("Username") = StrID
            Session("Access_Level") = strlevel
            Response.Redirect("load.asp")
        End If
    Else
       
        strErr = "Username and Password!"
    End If

    If Len(strErr) > 0 Then
       
        strErr = "<p><font color=red>" & strErr & "</font></p>"
    End If
End If
%>


og en side som skal vise det username som man er logget ind med

<% strGame = Session("ID")%>
<%
Set conn = Server.CreateObject("ADODB.Connection")
connString = "Driver={Microsoft Access Driver (*.mdb)};DBQ=" & Server.MapPath("../database/db.mdb")
conn.open connString
sql = "SELECT * FROM telefonbog WHERE owner = '"& RS("username") &"' order by id desc"
Set rs = conn.execute (sql)
%>



det er den her linie jeg er lidt usikker på: sql = "SELECT * FROM telefonbog WHERE owner = '"& RS("username") &"' order by id desc"


hvordan skal det klares???

ICQ: 76171056
MSN: mouseman_16@hotmail.com