|
|
<%
dim Params(99), ParamsName(99), ParamsOp(99), ParamsType(99)
%>
<%
p = 1
ID = Request.QueryString("ID")
TableName = Request.QueryString("Table")
DbName = Request.QueryString("DB")
StartHere = Request.QueryString("StartHere")
Password = Request.QueryString("Password")
Sort = Request.QueryString("Sort")
SortType = Request.QueryString("SortType")
Set ATable = CreateObject("ADODB.Recordset")
QueryStr = "SELECT * FROM " & TableName
ATable.Open QueryStr , "DSN=" & DBName & ";"
FieldCount = ATable.Fields.Count
If Password = "jethr0" Then
Do Until p = 99
ParamString = "P" & p
ParamNameString = "PN" & p
ParamOpString = "PO" & p
Params(p) = Request.QueryString(ParamString)
ParamsName(p) = Request.QueryString(ParamNameString)
ParamsOp(p) = Request.QueryString(ParamOpString)
If Params(p) <> "" and Not(IsNull(Params(p))) Then
ParamsType(p) = ATable.Fields(ParamsName(p)).Type
if ParamsType(p) = adChar or ParamsType(p) = adVarChar then
Params(p) = "'" & Params(p) & "'"
ParamsOp(p) = " Like "
end if
if ParamsType(p) = adDBTimeStamp or _
ParamsType(p) = adDate or _
ParamsType(p) = adDBDate or _
ParamsType(p) = adFileTime or _
ParamsType(p) = adDBTime or _
ParamsType(p) = adDBTimeStamp or _
ParamsType(p) = adFileTime Then
Params(p) = "#" & Params(p) & "#"
End If
WhereClause = WhereClause & " AND " & ParamsName(p) & ParamsOp(p) & Params(p)
p = p + 1
Else
p = 99
End If
Loop
If StartHere = "" or IsNull(StartHere) Then
StartHere = 0
End If
If WhereClause <> "" Then
WhereClause = " WHERE 1=1 " & WhereClause
End If
If Sort <> "" Then
SortClause = " ORDER BY [" & Sort & "] " & SortType
Else
SortClause = " ORDER BY [ID] "
End If
ATable.Close
Set ATable = CreateObject("ADODB.Recordset")
QueryStr = "SELECT * FROM " & TableName & WhereClause & SortClause
Response.Write(QueryStr)
ATable.Open QueryStr , "DSN=" & DBName & ";", adOpenStatic
if Not(ATable.EOF) Then
ATable.Move StartHere
End If
i = 1
%>
| >
|
|