search.asp

fger th t ytwety w4t qrt 43 q34rt5 q34t3q4t

<%
 ' 处理一般简单检索的程序
  dim searchstr '此变量用来表示每次检索生成的sql表达式
  searchstr="select * from product where "
 ' 此函数用来规范sql查询语句
   function sqlstr(data)
     sqlstr="'" & Replace(data,"'","''") & "'"
   end function
  productname = trim(request.form("product"))
  searchtype=request.form("searchtype")
 ' 根据不同的检索方式生成不同的检索SQL语句
  select case searchtype
    case "faint":'如果是模糊查询,则执行下面语句
       productname=sqlstr("%" & productname & "%")
       searchstr=searchstr & "name like " & productname 
       searchstr=server.urlencode(searchstr)
       response.redirect "searchresult.asp?sqlstring="&searchstr
    case "accurate":'如果是精确查询,则执行下面语句
       searchstr=searchstr&"name="&sqlstr(productname)
       searchstr=server.urlencode(searchstr)
       response.redirect "searchresult.asp?sqlstring="&searchstr
   end select
%>