26. april 2005 - 22:17
Der er
19 kommentarer og 2 løsninger
sort by name
Jeg har denne i mit script, og kan ikke få den til at sortere efter navn: <%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId")) If Url.EOF Then%> /cdc
Annonceindlæg tema
Offentlig digitalisering
Fra effektivisering til digital suverænitet. Hvordan skaber det offentlige en digital fremtid med AI, sikkerhed og kontrol i centrum?
26. april 2005 - 22:21
#1
<%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") ORDER BY navn) ?
26. april 2005 - 22:22
#2
"Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn"
26. april 2005 - 22:26
#3
kalp: Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") ORDER BY navn) -----------------------------------------------------------------------------------^
26. april 2005 - 22:27
#4
ranglen: Microsoft VBScript compilation error '800a03ee' Expected ')' /linkarkiv/index.asp, line 139 Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn" -----------------------------------------------------------------------------------------------------^
26. april 2005 - 22:28
#5
<%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn") If Url.EOF Then%>
26. april 2005 - 22:29
#6
Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn") du mangler bare den sidste parentes :)
26. april 2005 - 22:29
#7
eller <%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn) If Url.EOF Then%>
26. april 2005 - 22:29
#8
ranglen den så jeg: Microsoft JET Database Engine error '80040e10' No value given for one or more required parameters. /linkarkiv/index.asp, line 139
26. april 2005 - 22:30
#9
hvad hedder din kolonne;o) navn skal erstattes med dit kolonne navn hvor værdierne er i
26. april 2005 - 22:30
#10
kalp din sidste: Microsoft VBScript compilation error '800a0409' Unterminated string constant /linkarkiv/index.asp, line 139 Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by navn) -----------------------------------------------------------------------------------------------------^
26. april 2005 - 22:32
#11
<%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by kat") If Url.EOF Then%> hvis det er kat der skal sorteres efter
26. april 2005 - 22:35
#12
den hedder namn og ikke navn, men det gør ingen forskæl: Microsoft VBScript compilation error '800a0409' Unterminated string constant /linkarkiv/index.asp, line 139 Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by namn) -----------------------------------------------------------------------------------------------------^
26. april 2005 - 22:36
#13
"No value given for one or more required parameters." kommer, hvis du mangler at angive 'catid' i urlen. Fordi så ser din sql jo sådan ud: Select * From Url Where kat= Det går ikke. Så lav en kontrol inden du sender til databasen.. id = Trim(Request.QueryString("catId")) If id = "" Or Not IsNumeric(id) Then 'isnumeric: forhindrer sql-injection Response.Write "mangler id" Else 'send til database End If
26. april 2005 - 22:37
#14
Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by namn") :o)
26. april 2005 - 22:38
#15
smid et svar kalp din sidste med namn i stedet for kat virker...Tak for det /cdc
26. april 2005 - 22:40
#16
hele min kode ser således ud, til orientering, og den virker nu: <!--#Include file="inc/settings.asp"--> <html> <head> <title>/title> <link rel="stylesheet" href="inc/style.css" type="text/css"> </head> <body> <%If Request.QueryString("catId") <> "" Then Set Kat=Conn.Execute("Select * From kat Where id=" & Request.QueryString("catId")) End If%> <table width="350" cellpadding="4" cellspacing="0" class="border" align="center"> <tr> <td valign="top" class="rubrik"><b>Torsdagsmatch<%If Request.QueryString("catId") <> "" Then%><%If Not Kat.EOF Then%> - <%=Kat("kat")%><%End If%><%End If%></b></td> </tr> </table> <%If Request.QueryString("catId") = "" Then Set RS=Conn.Execute("Select * From kat Where sub_kat=0") If RS.EOF Then%> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <table width="350" cellpadding="4" cellspacing="0" class="border" align="center"> <tr> <td>Ingen kategori lagt ind.</td> </tr> </table> <%Else%> <table width="350" border="0" align="center"> <tr> <td valign="top"> <table width="100%" cellpadding="2" cellspacing="2" border="0"> <%x=0 Do Until RS.EOF Response.Write "<tr>" For i=1 to PK%> <td width="<%=Width%>"> <%If RS.EOF then%> <table width="<%=Width2%>" cellpadding="4" cellspacing="0"> <tr> <td valign="top"> </td> </tr> </table> <%Else%> <table width="<%=Width2%>" cellpadding="4" cellspacing="0" class="border"> <tr> <td valign="top"><b><a href="index.asp?catId=<%=RS("id")%>"><%=RS("kat")%></a></b></td> </tr> </table> <%X=X+1 RS.MoveNext End If Response.Write "</td>" Next Response.Write "</tr>" Loop%> </table> </td> </tr> </table> <%End If Else Set RS=Conn.Execute("Select * From kat Where sub_kat=" & Request.QueryString("catId")) Set Antal=Conn.Execute("Select Count(*) As antal From kat Where sub_kat=" & Request.QueryString("catId")) If Antal("antal") <> "0" Then If RS.EOF Then%> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <table width="350" cellpadding="4" cellspacing="0" class="border" align="center"> <tr> <td align="center">Intet under <%=Kat("kat")%></td> </tr> </table> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <%Else%> <table width="350" border="0" align="center"> <tr> <td valign="top" align="center" valign="top"> <table width="100%" cellpadding="2" cellspacing="2" border="0"> <%x=0 Do Until RS.EOF Response.Write "<tr>" For i=1 to PK%> <td width="<%=Width%>"> <%If RS.EOF then%> <table width="<%=Width3%>" cellpadding="4" cellspacing="0"> <tr> <td valign="top"> </td> </tr> </table> <%Else%> <table width="<%=Width3%>" cellpadding="4" cellspacing="0" class="border" border="0"> <tr> <td valign="top"><%=RS("kat")%></td> </tr> </table> <%X=X+1 RS.MoveNext End If Response.Write "</td>" Next Response.Write "</tr>" Loop%> </table> </td> </tr> </table> <%End If Else%> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <%Set Url=Conn.Execute("Select * From Url Where kat=" & Request.QueryString("catId") & " order by namn") If Url.EOF Then%> <table width="350" cellpadding="4" cellspacing="0" class="border" align="center"> <tr> <td align="center">Intet under <%=Kat("kat")%></td> </tr> </table> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <%Else Do Until Url.EOF%> <table width="350" cellpadding="3" cellspacing="0" class="border" align="center"> <tr> <td width="20%"><%=Code(Url("namn"))%></td> <td width="20%"><%=Code(Url("url"))%></td> <td width="60%"><%=Code(Url("info"))%></td> </tr> </table> <table width="350" border="0" cellspacing="0" cellpadding="0" height="5" align="center"> <tr> <td></td> </tr> </table> <%Url.MoveNext Loop End If End If If Request.QueryString("catId") <> "" Then Set Kat=Conn.Execute("Select * From kat Where id=" & Request.QueryString("catId"))%> <table width="350" cellpadding="4" cellspacing="0" class="border" align="center"> <tr> <td> <%If Kat("sub_kat") = 0 Then%> <a href="index.asp">Tillbage</a> <%Else%> <a href="index.asp?catId=<%=Kat("sub_kat")%>">Tillbage</a> <%End If%> </td> </tr> </table> <%End If End If Conn.Close Set Conn=Nothing%> </body> </html>
26. april 2005 - 22:43
#17
Synes jeg skal dele med ranglen vi var sådan lige gode om det:) han smed lige en " efter namn som du manglede og jeg smed en parantese efter hans første forslag:))
26. april 2005 - 22:49
#18
så smider i begge bare et svar så deler I, i porten :o) /cdc
26. april 2005 - 23:06
#19
Ok
26. april 2005 - 23:14
#20
Hvis du gerne vil kode mere sikkert, så skal du gøre mere ud af at validere input. Google: sql injection Dette er en fæl teknik til at hacke hjemmesider
26. april 2005 - 23:30
#21
Har du et link til dette: Google: sql injection så jeg kan læse mere om det ? /cdc
Kurser inden for grundlæggende programmering