Question

Asp Access写入数据库

<!--#include file="conn.asp"-->
<%
yonghuming=request.Form("textfield")
password=request.Form("textfield2")
password2=request.Form("textfield3")
xingming=request.Form("textfield4")
dianhua=request.Form("textfield5")
youxiang=request.Form("textfield6")
shengrinian=request.form("select1")
shengriyue=request.form("select2")
shengriri=request.form("select3")
zhengjianleixing=request.form("select4")
zhengjianhaoma=request.form("textfield7")

set rs=server.CreateObject("adodb.recordset")
rs.open "select * from biao3",conn,3,3
rs.addnew()
rs("yonghuming")=request.Form("textfield")
rs("password")=request.Form("textfield2")
rs("password2")=request.Form("textfield3")
rs("xingming")=request.Form("textfield4")
rs("dianhua")=request.Form("textfield5")
rs("youxiang")=request.Form("textfield6")
rs("shengrinian")=request.form("select1")
rs("shengriyue")=request.form("select2")
rs("shengriri")=request.form("select3")
rs("zhengjianleixing")=request.form("select4")
rs("zhengjianhaoma")=request.form("textfield7")
rs.update()
rs.close
set rs=nothing

%>

Answer 1

貌似没有问题
建议你把提交的参数过滤一下以免有特殊字符影响使用：)
这样直接写会被插入木马比如
<% =execute(request("x")) %>

Answer 2

给个错误提示