Error executing sql expression ASP

Question

I'm attempting to use a variable for the column field in the SQL statement however it shoots back the following error at me:

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[Microsoft][ODBC Text Driver] Syntax error (missing operator) in query expression '= 'Yes''.

/junk/dbresults.htm, line 31

THE CODE:

<%
    Dim connectString, connect, conDB, con
    connectString = "Driver={Microsoft Text Driver (*.txt; *.csv)}; DBQ=" & Server.MapPath("data")
          src_abn = Request.QueryString("abn")
          src_cat = Request.QueryString("cat")
    set connect = Server.CreateObject("ADODB.connection")
    connect.open connectString

    if src_abn = "all" then
    conDB = "SELECT * FROM cont.csv WHERE " & src_cat & " = 'Yes'"  
    else
    conDB = "SELECT * FROM cont.csv WHERE ucase(abn) LIKE ucase('%"+src_abn+"%')"   
    end if

    set con = connect.execute(conDB)
%>

Does src_cat happen to be an empty string?

Oded
– Oded

2013-01-09 21:18:24 +00:00
Commented Jan 9, 2013 at 21:18 — Oded
– Oded, Commented Jan 9, 2013 at 21:18

squillman · Accepted Answer · 2013-01-09 21:21:07Z

1

Looks like the value of src_cat contains spaces or other characters that create an invalid query. Try changing that line to this (with brackets):

conDB = "SELECT * FROM cont.csv WHERE [" & src_cat & "] = 'Yes'"

answered Jan 9, 2013 at 21:21

squillman

13.7k3 gold badges45 silver badges65 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

user447356 Over a year ago

Worth to warn the OP here of SQL Injection attack.

sephiith · Accepted Answer · 2013-01-09 21:27:41Z

0

Fixed it, the variables were not delcared.

answered Jan 9, 2013 at 21:27

sephiith

1,1973 gold badges24 silver badges48 bronze badges

Collectives™ on Stack Overflow

Error executing sql expression ASP

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related