经典 Asp 中的参数化查询

Dim conn, cmd, param
Set conn = Server.CreateObject("ADODB.Connection")
conn.Open "Provider=SQLOLEDB;Data Source=localhost;Initial Catalog=mydatabase;User ID=myusername;Password=mypassword;"
Set cmd = Server.CreateObject("ADODB.Command")
Set param = cmd.CreateParameter("@username", adVarChar, adParamInput, 50)
cmd.Parameters.Append param
cmd.CommandText = "SELECT * FROM users WHERE username = @username"
cmd.CommandType = adCmdText
cmd.ActiveConnection = conn
Set recordset = cmd.Execute