Question

大家看看这段asp代码哪错了，提示参数类型不正确，或不在可以接受的范围之内，或与其他参数冲突。

还有一个问题是sql =" SELECT * FROM [user] WHERE [right_no] =5 and [user_name]="' & Request.Form("username") &'”and [secret]="' & Request.Form("password") &'"”
secret列老是出错！

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!--#include file="Connections/cnn2.asp" -->

<%

dim sql
if Request.Form("submit")="登录"then
if Request.Form("radio")="招生办"then
Set rs = Server.CreateObject("ADODB.Recordset")
sql =" SELECT * FROM [user] WHERE [right_no] =1 and [user_name]="' & Request.Form("username") &'""
' 要修改and [secret]="' & Request.Form("password") &'"
rs.open sql,cnn2,1,3
if rs.bof and rs.eof then
response.Write"<center>请输入正确的用户名和密码！重新登录！</center>"
rs.close
else
rs.close
session("user_name")=Request.Form("username")
session("secret")=Request.Form("password")
set rs=nothing
response.Redirect"z_s_b.asp"
end if

elseif Request.Form("radio")="院系"then
Set rs = Server.CreateObject("ADODB.Recordset")
sql =" SELECT * FROM [user] WHERE [right_no] =2 and [user_name]="' & Request.Form("username") &'""
'要修改and [secret]="' & Request.Form("password") &'"
rs.open sql,cnn2,1,3
if rs.bof and rs.eof then
response.Write"<center>请输入正确的用户名和密码！重新登录！</center>"
rs.close
else
rs.close
session("user_name")=Request.Form("username")
session("secret")=Request.Form("password")
set rs=nothing
response.Redirect"depart.asp"
end if

elseif Request.Form("radio")="财务处"then
Set rs = Server.CreateObject("ADODB.Recordset")
sql =" SELECT * FROM [user] WHERE [right_no] =3 and [user_name]="' & Request.Form("username") &'""
'要修改and [secret]="' & Request.Form("password") &'"
rs.open sql,cnn2,1,3
if rs.bof and rs.eof then
response.Write"<center>请输入正确的用户名和密码！重新登录！</center>"
rs.close
else
rs.close
session("user_name")=Request.Form("username")
session("secret")=Request.Form("password")
set rs=nothing
response.Redirect"finance.asp"
end if

elseif Request.Form("radio")="后勤部门"then
Set rs = Server.CreateObject("ADODB.Recordset")
sql =" SELECT * FROM [user] WHERE [right_no] =4 and [user_name]="' & Request.Form("username") &'""
'要修改and [secret]="' & Request.Form("password") &'"
rs.open sql,cnn2,1,3
if rs.bof and rs.eof then
response.Write"<center>请输入正确的用户名和密码！重新登录！</center>"
rs.close
else
rs.close
session("user_name")=Request.Form("username")
session("secret")=Request.Form("password")
set rs=nothing
response.Redirect"service.asp"
end if

end if

elseif Request.Form("radio")="重置"then
response.Redirect"login.asp"
end if

%>

Answer 1

输出sql语句看看:
sql =" SELECT * FROM [user] WHERE [right_no] =1 and [user_name]="' & Request.Form("username") &'""
response.write sql
response.end
另外的问题：and [secret]前面加空格了吗？

追问

加了 输出是SELECT * FROM [user] WHERE [right_no] =5 and [user_name]=
这是怎么回事

追答

那说明username参数没有传递过来，你看看提交的表单正确不正确。

追问

改了一下，现在可以显示了
SELECT * FROM [user] WHERE [right_no] =5 and [user_name]='赵一' and [secret]='A11'
但是还是提示参数类型不正确，或不在可以接受的范围之内，或与其他参数冲突。

追答

哪行错误啊？
你这很多东西搅在一起，代码也没个缩进，自己都不好维护，我好像没看到代码里有[right_no] =5的。

Answer 2

如果字段名称不是数据库保留字的话，不要给字段加符号！
[right_no]改成right_no