Visitor Forum - Talking Back <% Param = Request.QueryString("Param") Data = Request.QueryString("Data") %> <% If IsObject(Session("artery_conn")) Then Set conn = Session("artery_conn") Else Set conn = Server.CreateObject("ADODB.Connection") conn.open "artery","","" Set Session("artery_conn") = conn End If %> <% sql = "SELECT * FROM [Public]" If cstr(Param) <> "" And cstr(Data) <> "" Then sql = sql & " WHERE [" & cstr(Param) & "] = " & cstr(Data) End If Set rs = Server.CreateObject("ADODB.Recordset") rs.Open sql, conn, 3, 3 %> <% On Error Resume Next rs.MoveFirst do while Not rs.eof %> <%=Server.HTMLEncode(rs.Fields("Name").Value)%>,  <%=Server.HTMLEncode(rs.Fields("Organization").Value)%> <%=Server.HTMLEncode(rs.Fields("Subject").Value)%> <%=Server.HTMLEncode(rs.Fields("Message").Value)%> <% rs.MoveNext loop%>