Microsoft VBScript error

TRANSPH · March 8th, 2011, 07:05 AM

I'm really sorry but im new to asp. I get this problem every time I try it.

Microsoft VBScript compilation error '800a0411'

Name redefined

/_____13_/jeremiahmojares/listofstudentrecords.asp, line 12

Dim section, SQL
-------------^

Here's the code any help would be greatly appreciated :)

<% Option Explicit %>
<html>
<head>
<title>Student List</title>
</head>

<body>
<h1 align="center">List of Students</h1>


<%
Dim section, SQL
section=Request.Form("section")
%>
<h2 align="center">Section: <%=section%></h2>

<%
SQL = "select * from students where studsection='"
SQL = SQL & section & "' order by lastname,firstname"
rs.Open SQL, conn
%>

<p align="center">
<table boder="1">
<tr align="center">
<td>STUDENT<br />NUMBER</td>
<td>NAME</td>
<td>GENDER</td>
<td>SECTION</td>
</tr>

<%
While rs.EOF=False
%>
<tr>
<td>
<a href="updatestudentrecord.asp?studnum=<%=rs("studn um")%>">
<%=rs("studnum")%></a>
</td>
<td><%=rs("lastname") & " " & rs("firstname")%></td>
<td><%=rs("gender")%></td>
<td><%=rs("studsection")%></td>
</tr>
<%
rs.MoveNext
Wend
%>
</table>
</p>

<%
rs.Close
set conn = Nothing
%>
</body>
</html>

Imar · March 8th, 2011, 12:06 PM

Hi there,

You typically get this error when using an include file that already defines a variable with the same name. Let's say connect.asp contains this code:

Code:

 
Dim SQL

Your current page then contains this:

Code:

 
<!--#include file="connect.asp"-->
Dim section, SQL

When the page is parsed, the include file is placed in the main file, resulting in this code:

Code:

 
Dim SQL
Dim section, SQL

This in turn leads to the error you're getting.

Either use a new variable name, or find out if you really need the SQL variable in the include file.

Hope this helps,

Imar

Imar · March 8th, 2011, 12:08 PM

BTW: you may want to read a bit on SQL injection and ways to prevent it: http://en.wikipedia.org/wiki/SQL_injection

With your current code, you site is open for attacks, which could lead to loss of data, or worse - loss of control over your server..... ;-(

Cheers,

Imar

TRANSPH · March 9th, 2011, 06:30 AM

Thanks for the help Imar. We only need this for a project in school so I wouldn't need to change the code for security reasons :)

Imar · March 9th, 2011, 08:26 AM

It's never too soon to start learning best practices, especially when it comes to security... ;-)

Imar