blocks|key|5278278|text|SQL存储过程不同于ASP函数--存储过程是您在数据库中创建的东西。语法因您的RDBMS而异。但是像这样的东西：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5278279|CREATE+PROCEDURE+UpdateYourTable
++++@id+int,+
++++@prop1+nvarchar(50).
++++@prop2+nvarchar(50)
AS+

++++SET+NOCOUNT+ON;

++++UPDATE+table+
++++SET+prop1+=+@prop1,+prop2+=+@prop2+
++++WHERE+id+=+@id

GO|code-block|syntax|javascript|5278280|然后，您将通过您的代码调用此存储过程，这与您发布的文章非常相似。|5278281|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

A SQL Stored Procedure is different than an ASP Function -- a Stored Procedure is something you create in your database. The syntax is different depending on your RDBMS. But something like this:

<pre><code>CREATE PROCEDURE UpdateYourTable
 @id int, 
 @prop1 nvarchar(50).
 @prop2 nvarchar(50)
AS 

 SET NOCOUNT ON;

 UPDATE table 
 SET prop1 = @prop1, prop2 = @prop2 
 WHERE id = @id

GO
</code></pre>

You would then call this stored procedure through your code very much like the article you posted.

blocks|key|1927239|text|存储过程驻留在后端数据库中，而不是ASP代码中。在您发布的链接中，可能会让您感到困惑的是，它包含了用于执行服务器端过程的客户端代码，并没有显示出来。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1927240|在您的示例中，实际的存储过程本身将如下所示：|1927241|CREATE+PROCEDURE+dbo.MyProcedure
(
+++@prop1+varchar(255),+--Fill+in+appropriate+data+types+if+necessary
+++@prop2+varchar(255),
+++@id+int
)
AS
++SET+NOCOUNT+ON;

++UPDATE+table
++SET+prop1+=+@prop1,
++++++prop2+=+@prop2
++WHERE+id+=+@id;|code-block|syntax|javascript|1927242|(@sgeddes是正确的，该过程应该包括SET+NOCOUNT+ON。我已经将其添加到我的示例中。)|offset|length|style|CODE|1927243|然后，您可以使用以下客户端代码来调用该过程(我已经编辑了您的链接中的代码，以便更容易理解)。|1927244|'Create+ADO+command
Set+cmd+=+Server.CreateObject("ADODB.Command")
With+cmd
+++'Set+up+DB+connection+to+use,+set+the+type+of+SQL+command
+++.ActiveConnection+=+db
+++.CommandType+=+adCmdStoredProc
+++.CommandText+=+"dbo.MyProcedure"+'+Set+the+name+of+the+Stored+Procedure+to+use

+++'Add+a+255+character+varchar+parameter
+++.Parameters.Append+.CreateParameter("@prop1",adVarChar,+adParamInput,+255)
+++.Parameters("@prop1")+=+"Prop+1+Value"

+++'Add+a+255+character+varchar+parameter
+++.Parameters.Append+.CreateParameter("@prop2",adVarChar,+adParamInput,+255)
+++.Parameters("@prop2")+=+"Prop+2+Value"

+++'Add+a+integer+parameter,+then+pass+the+value+of+the+variable+userID+to+it
+++.Parameters.Append+.CreateParameter("@id",adInteger,+adParamInput)
+++.Parameters("@id")+=+userID

+++'Execute+the+command
+++.Execute
End+With

'Clean+up
set+cmd+=+nothing|1927245|这显然比你现在拥有的代码要多得多。那你为什么要这么做呢？最重要的原因是安全性。通过创建参数化过程并在参数中传递值，您可以极大地降低任何类型的SQL注入攻击的可能性。|1927246|entityMap^0|0|0|0|L|E|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|Z|8|@$K|10|L|11|M|N]]|9|@]|A|$]]|$1|O|3|P|5|6|7|12|8|@]|9|@]|A|$]]|$1|Q|3|R|5|F|7|13|8|@]|9|@]|A|$G|H]]|$1|S|3|T|5|6|7|14|8|@]|9|@]|A|$]]|$1|U|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|V|$]]

A stored procedure lives in your backend database, not your ASP code. What's probably confusing you in the link you posted is that it contains the client-side code that's used to execute the server-side procedure, which isn't shown.

In your case, the actual stored procedure itself would look something like this:

<pre><code>CREATE PROCEDURE dbo.MyProcedure
(
 @prop1 varchar(255), --Fill in appropriate data types if necessary
 @prop2 varchar(255),
 @id int
)
AS
 SET NOCOUNT ON;

 UPDATE table
 SET prop1 = @prop1,
 prop2 = @prop2
 WHERE id = @id;
</code></pre>

(@sgeddes is right that the procedure should include <code>SET NOCOUNT ON</code>. I've added that to my example.) 

Then you would use the following client-side code to call that procedure (I've edited the code from your link to make it easier to follow).

<pre><code>'Create ADO command
Set cmd = Server.CreateObject("ADODB.Command")
With cmd
 'Set up DB connection to use, set the type of SQL command
 .ActiveConnection = db
 .CommandType = adCmdStoredProc
 .CommandText = "dbo.MyProcedure" ' Set the name of the Stored Procedure to use

 'Add a 255 character varchar parameter
 .Parameters.Append .CreateParameter("@prop1",adVarChar, adParamInput, 255)
 .Parameters("@prop1") = "Prop 1 Value"

 'Add a 255 character varchar parameter
 .Parameters.Append .CreateParameter("@prop2",adVarChar, adParamInput, 255)
 .Parameters("@prop2") = "Prop 2 Value"

 'Add a integer parameter, then pass the value of the variable userID to it
 .Parameters.Append .CreateParameter("@id",adInteger, adParamInput)
 .Parameters("@id") = userID

 'Execute the command
 .Execute
End With

'Clean up
set cmd = nothing
</code></pre>

That's obviously a lot more code than what you have right now. So why would you do it? The most important reason is security. By creating a parameterized procedure and passing the values in parameters, you drastically reduce the likelihood of any sort of SQL injection attack.

I am iterating over an html table.

Each row has an id, and the table has 2 columns/2 properties.

Here is my loop:

<pre><code>Dim id
 Dim prop1
 Dim prop2

For Each id In Request.Form("id")
 prop1 = Request.Form(id &amp; "_prop1")
 prop1 = Request.Form(id &amp; "_prop2")
Next
</code></pre>

Imagine I want to update the data in my database... I might put in that loop

<pre><code>"UPDATE table SET prop1 = '" &amp; prop1 &amp; "', prop2 = '" &amp; prop2 &amp; "'" WHERE id = '" &amp; id &amp; 
"'"
</code></pre>

What is a SQL stored procedure and how would I go about implementing one for this operation?

For example in this link: <a href="http://www.albofish.co.uk/ms-sql-stored-procedures-and-classic-asp/" rel="nofollow">http://www.albofish.co.uk/ms-sql-stored-procedures-and-classic-asp/</a>

I see no reference to the table you are to be updating... I just don't understand it. d'oh

With this example: <a href="http://www.ehow.com/way_5901555_tutorial-sql-stored-procedures.html" rel="nofollow">http://www.ehow.com/way_5901555_tutorial-sql-stored-procedures.html</a>

I cannot see how I am to put my form values into the procedure?

SQL Server stored procedure for ASP classic

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在迭代一个html表。每一行都有一个id，表有2列/2个属性。下面是我的循环：Dim id    Dim prop1    Dim prop2For Each id In Request.Form("id")    prop1 = Request.Form(id & "_prop1")    prop1 = Req...

问适用于ASP的SQL Server存储过程
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问适用于ASP的SQL Server存储过程EN