如何在经典ASP上进行参数化SQL查询？

<!--#include file="adovbs.inc"-->

<%
Dim conn
Set conn = Server.CreateObject("ADODB.Connection")
conn.Open "Provider=SQLOLEDB;Data Source=your_server;Initial Catalog=your_database;User ID=your_username;Password=your_password;"
%>

<%
Dim cmd
Set cmd = Server.CreateObject("ADODB.Command")
Set cmd.ActiveConnection = conn
cmd.CommandText = "SELECT * FROM your_table WHERE id = ?"
%>

<%
Dim param
Set param = cmd.CreateParameter("id", adInteger, adParamInput, , Request.QueryString("id"))
cmd.Parameters.Append param
%>

<%
Dim rs
Set rs = cmd.Execute
If Not rs.EOF Then
    Response.Write "ID: " & rs("id") & "<br>"
    Response.Write "Name: " & rs("name") & "<br>"
End If
rs.Close
%>