% post = Request("post") post = Replace(post,"'","") post = Replace(post," ","") Session("title") = post %> <% set rstxt=server.createobject("adodb.recordset") if post = "" then rstxt.open "select * from product order by id desc ",conn,1,3 Else rstxt.open "select * from product where title='"&Session("title")&"' order by id desc ",conn,1,3 end if %>
|
||||||||||||||
|
|
||||||||||||||
|
|