Web form to update Access DB

Duh. That makes sense. However, same error, same location " RSFind.Open SQL, CNObj, 1, 3, 1"

Update your connection string to be like this, and test again:

CNObj.Open "PROVIDER=MICROSOFT.JET.OLEDB.4.0;DATA SOURCE=c:\inetpub\wwwroot\rt.mdb"

Where is it that you initialize RSFind? You're getting this error because RSFind.Open is a call to the Open method on the RSFind object, but the RSFind object hasn't been initialized yet. You need to initialize it in the same way you initialized RSDisplay. (But, then, why did you initialize RSDisplay? You don't subsequently use it.)

Meanwhile, you're vulnerable to SQL injection attacks. What if Request.Form("ReferralID") returns "'; DROP TABLE REFERRAL;" ?

mikeblas said:

Meanwhile, you're vulnerable to SQL injection attacks. What if Request.Form("ReferralID") returns "'; DROP TABLE REFERRAL;" ?

Click to expand...

Never trust users, be they malicious or stupid. If you always use prepared statements, you eliminate the problem of SQL injection. Of course, you still need to make sure that user input is not garbage, but prepared statements will ensure that it is not damaging.

It's a form for internal use that will only get used by so many users every so often. Not something everyday all day or anything like that

tgabe213 said:

It's a form for internal use that will only get used by so many users every so often. Not something everyday all day or anything like that

Click to expand...

Bryophyte and mikeblas's point is still valid -- Do you want to do proper data validation and preventative measures now, or do data cleanup later? What about more extensive problems if one of the worse case scenarios presented actually happens?

Granted, you're still working on getting the pages functional. But you still want to design to prevent these situations from happening. It usually takes less time to do this now, rather than get everything working and having to refactor later to prevent/trap these problems.

Why bother getting them functional when they'll need to be rewritten to be safe?