% if request.form("add") = "yes" then SQLUpdate = "UPDATE Forces_Wanted SET Paid = 'yes' WHERE ItemID = '"&killchars(request.form("itemid"))&"' " MyConn.execute(SQLUpdate) response.redirect "wanted-preview.asp?upload=done&idst="&request.form("itemid") end if %>
Thank you for advertising your wanted item on our noticeboard. ">Click here to view our listings.
<%else%> <% Set MyCmd = Server.CreateObject("ADODB.Command") MyCmd.ActiveConnection = MyConn MyCmd.CommandText = "SELECT * FROM Forces_Wanted WHERE ItemID = ?" MyCmd.Parameters.Append MyCmd.CreateParameter("", 3, 1, , request("id")) Set RSInfo = Server.CreateObject("ADODB.RecordSet") RSInfo.Open MyCmd Do While Not RSInfo.EOF %>| Wanted item |