How would i...

[Bubbles_]

I want to create a search box, where users can enter a name, and it searches the database and displays. the form tag is

<form runat="server" name="form1" method="post" action="search2.asp">

in search2.asp i put the SQL as

SQLString = "SELECT * FROM Clients WHERE Request.Form("surname")=surname ORDER BY clientID ASC "

Am i doing something really silly and wrong?

Plus, in future i'd like to create a thing, where the user can select what field he'd like to search in aswell, and advice?

Thanks in advance

[andreys]

Should be: (I thinnk)

SQLString = "SELECT * FROM Clients WHERE surname ='" & Request.Form("username") & "' ORDER BY clientID ASC "

[Bubbles_]

Thanks a lot !!

Works

[Bubbles_]

the next bit...

I have this on search.asp

<select name="searchtype">
<option value="ClientID">ClientID
<option value="surname">Surname
<option value="age" selected>Age
<option value="Email">Email
</select>

what would you type in search2.asp so that it selects that field, something like this?

SQLString = "SELECT * FROM "' & Request.form("searchtype") & "' WHERE surname ='" & Request.Form("field") & "' ORDER BY clientID ASC "

[andreys]

NO,

it's:

SQLString = "SELECT * FROM Clients  WHERE [" & Request.form("searchtype") & "]='" & Request.Form("field") & "' ORDER BY clientID ASC "


if age is a numeric field then remove single quotes from sql statement. Same for ClientID.

It's always:

SELECT fields_to_select
FROM table_name
WHERE field_name = field_value
ORDER BY field_name ASC (DESC)

[Bubbles_]

you sir...are a god !



watch this space for more silly problems

[andreys]

Can't wait....