Question

asp语法错误

<form action="xia.asp?id=<%=id%>" method="post">
<table width="50%" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td>密码： 
<input name="mi" type="text">
<input name="下载" type="submit" id="下载" value="下载"></td>
</tr>
</table>
</form>

<%
dim password1

password1=request("mi")
Set rs=Server.CreateObject("ADODB.RecordSet")
sql="select * from xia where password1= '"&mi&"'"
rs.Open sql,Conn,1,3

If rs.eof Then
response.redirect "loginerror.asp "
response.end
else
session("mi")=rs("mi")
response.redirect "index.asp "
end if
rs.close
%>
看一下是哪些地方有错误

Answer 1

<form name="form1" action="xia.asp?id=<%=id%>" method="post">
<table width="50%" border="0" cellspacing="0" cellpadding="0" align="center">
<tr>
<td>密码：
<input name="mi" type="text">
<input name="Download" type="submit" id="Download" value="下载"></td>
</tr>
</table>
</form>
<%
dim password1

password1=request.Form("mi") ''最好需要过滤下，是否有关键字符
Set rs=Server.CreateObject("ADODB.RecordSet")
sql="select * from xia where password1= '"&password1&"'"
rs.Open sql,Conn,1
If rs.eof Then
response.redirect "loginerror.asp "
response.end
else
session("mi")=rs("password1") '此时的session名可以随便改，在这里说明下
response.redirect "index.asp "
end if
rs.close
set rs=nothing
%>

Answer 2

password1=request("mi")
Set rs=Server.CreateObject("ADODB.RecordSet")
sql="select * from xia where password1= '"&mi&"'"
你是用password1来读取的mi的传递数据，所以sql的查询语句也要用password1而不是mi。
sql="select * from xia where password1= '"&mi&"'"
改成
sql="select * from xia where password1= '"&password1&"'"

Answer 3

你的数据表里有mi字段吗

将rs("mi") 换成rs("password1") 试试

Answer 4

sql="select * from xia where password1= '"&mi&"'"这句是不是得改成
sql="select * from xia where password1= '"&password1&"'"
这谁写的啊，程序比较差劲。