Classic ASP SQL Parameterization - How Can I Remove Single Quotes From A Parameter?
问题 I am using classic ASP with a parameterized SQL querystring as follows: SQL = "SELECT * FROM content WHERE Category LIKE ? ORDER BY SubDate ?" The SQL query string is being used in the following parameterized code: Set cmd = Server.CreateObject("ADODB.Command") Set rsView = Server.CreateObject("ADODB.Recordset") cmd.ActiveConnection = MM_connContent_STRING cmd.Prepared = true cmd.CommandType = adCmdText cmd.CommandText = SQL cmd.CommandTimeout = 60 cmd.Parameters.Append(cmd.CreateParameter(