|
|
|
|
 |
|
손님 / 2001-03-21 / 오후 6:28:49 / 211.238.54.100
조회수 : 133
|
| [질문] 추가 에러메시지입니다... |
Microsoft OLE DB Provider for ODBC Drivers (0x80040E14)
[Microsoft][ODBC SQL Server Driver][SQL Server]The name 'name' is not permitted in this context. Only constants, expressions, or variables allowed here. Column names are not permitted.
/tasp/mysite/write_ok.asp, line 40
------------------------------------
해당소스
---------------------------------
<%
'request객체를 통해 넘어온 값들을 변수에 저장한다. (추천되는 방법이다)
name = request("name")
email = request("email")
homepage = request("homepage")
title = request("title")
pwd = request("pwd")
content = request("content")
writeday = now
'쿼리에 '가 들어가면 에러가 나기에 그것을 replace 처리해준다.
title = replace(title,"'","''")
content = replace(content,"'","''")
content = replace(content,"|","chr(124)_pipe")
'HTML 태그(tag) 효과를 제한하고 싶으시다면
'title = replace(title,"&","&")
'title = replace(title,"<","<")
'title = replace(title,">",">")
'content = replace(content,"&","&")
'content = replace(content,"<","<")
'content = replace(content,">",">")
Set db = Server.CreateObject("ADODB.Connection")
db.Open "MySiteDB","sa"
SQL = "Select Max(num) from MyBoard"
Set rs = Server.CreateObject("ADODB.Recordset")
rs.Open SQL, db
If IsNULL(rs(0)) Then
num = 1
else
num = rs(0) + 1 <---해당40라인
End If
SQL = "INSERT INTO MyBoard (name,email,homepage,title,pwd,num,writeday,readnum,content) VALUES (name,email,homepage,title,pwd,num,writeday,0,content)"
db.Execute(SQL)
rs.Close
db.close
Set rs = Nothing
Set db = Nothing
Response.redirect "list.asp"
%> |
|
|
|