ASP — SQL

SELECT

<%
sql = "SELECT * FROM users WHERE active = 1"
Set rs = conn.Execute(sql)

Do While Not rs.EOF
    Response.Write(rs("name") & "<br>")
    rs.MoveNext
Loop
%>

INSERT

<%
sql = "INSERT INTO users (name, email) VALUES ('John', 'john@example.com')"
conn.Execute(sql)
%>

UPDATE

<%
sql = "UPDATE users SET email = 'new@email.com' WHERE id = 1"
conn.Execute(sql)
%>

DELETE

<%
sql = "DELETE FROM users WHERE id = 1"
conn.Execute(sql)
%>

Parameterized Queries

<%
Set cmd = Server.CreateObject("ADODB.Command")
cmd.ActiveConnection = conn
cmd.CommandText = "SELECT * FROM users WHERE name = ?"
cmd.Parameters.Append cmd.CreateParameter("name", 200, 1, 50, Request.QueryString("name"))
Set rs = cmd.Execute
%>

Mini Practice

1. Execute SELECT
2. Execute INSERT
3. Execute UPDATE
4. Use parameterized queries

Up Next

Continue with Authentication — user authentication.