get error when SELECT search starts with "@"
Here's a good one for you.....help if you can.
People come to my order page from two directions...both enters vendor info for them.
If they know a Person/Organizaion ID they enter the number and click the button which sends uiid or fein number they entered. uiid format = 123456789 or @12345678. fein format = 12-3456789
The user can also go to our vendor table and click a vendor which will send the key to the order page.
Problem is my code works great for everything except when they enter a uiid that starts with a @.
Before I gave them a direct link from the vendor table this part worked fine.
The added line to make the vendor lookup link work: " OR key = " & Request.Form("search_string")
my SQL statement:
sSQL = "SELECT * " & _
" FROM vendor" & _
" WHERE fein = '" & Request.Form("search_string") & "'" & _
" OR uiid = '" & Request.Form("search_string") & "'" & _
" OR key = " & Request.Form("search_string")
Set rs = Connect.Execute(sSQL)
|
