Menu

#1 Minor change

open
nobody
None
5
2002-10-31
2002-10-31
Anonymous
No

There is a potential problem in the file: SESSION.ASP

If sessionRS(0) = 0 Then
objDB.Exec("INSERT INTO session VALUES
('" & Session.SessionID & "', '" & Request.Form("uid")
&"', '" & Now &"')")
Else
objDB.Exec("UPDATE " & tableSession & "
SET tstamp='" & Now & "' WHERE sid='" &
Session.SessionID & "' AND " & fld_uid & "='" &
Request.Form("uid") &"';")
End If

The INSERT INTO instruction goes to a "session" table,
but the UPDATE goes to a "tableSession".

It should be INSERT INTO " & tableSession & " VALUES

Discussion


Log in to post a comment.