ASP save data and bulk Delete data method

Note: Different field names are separated by commas in English and do not support asterisks
Table name Enter the table name to query: such as: table1
Front desk Form page:
The main note is the Name property of the input field.
The commonly used code for adding data under ASP is:
Through Adodb.recordset
The advantage is: Database warehousing is relatively simple, do not consider the single quotation mark problem. There is no easy error.
The code is as follows:

username = Request ("username")
Password = Request ("password")
email = Request ("email")
Telphone = Request ("Telphone")
Sql= "SELECT * FROM table1"
Rs.Open sql,conn,1,3
Rs.addnew
RS ("username") =username
RS ("password") =password
RS ("email") =email
RS ("Telphone") =telphone
Rs.update
Rs.close

The second method is through the SQL data, to achieve high efficiency in warehousing, but prone to problems, need to consider single quotes and so on.
The code above is actually an encapsulation of the SQL INSERT statement.
Copy code code as follows:

Set Conn=server.createobject ("Adodb.connection")
' Create a Recordset object method
Set Rst=server.createobject ("Adodb.recordset")
Set Rst1=conn.execute ("INSERT into User (U_user,u_pass) VALUES ('" &request.form ("U_user") & "', '" & Request.Form ("U_pass") & "')"

Script House Friendship Reminder: For security reasons, in many cases, the user input to the content, the conversion of the antisense. such as using
Username=server.htmlencode (Request ("username"))

Also, let's look at how ASP deletes data.

id = saferequest ("id")
Sql= "Delete from table1 where whereid>" &id& "
Rs.Open sql,conn,1,3
Response.Write "<script>alert (' delete success '); location.href= ' del.asp ';</script>"
Set rs=nothing
Set Conn=nothing

Provides a bulk deletion code

Id=request.form ("checkbox")
Id=split (ID, ",")
Shu=0
For i=0 to UBound (ID)
Sql= "SELECT * from Jiang_fname where id=" &id (i)
Set Rs=conn.execute (SQL)

Shu=shu+1
Next