asp表单提交数据库

<%@ Language=VBScript %>
<%
Dim conn, rs, sql
Set conn = Server.CreateObject("ADODB.Connection")
conn.Open "Provider=SQLOLEDB;Data Source=your_server;Initial Catalog=your_db;User ID=your_user;Password=your_password;"
sql = "INSERT INTO your_table (field1, field2) VALUES ('" & Request.Form("field1") & "', '" & Request.Form("field2") & "')"
Set rs = conn.Execute(sql)
conn.Close
Set conn = Nothing
%>

<%@ Language=VBScript %>
<%
Dim conn, cmd, param1, param2
Set conn = Server.CreateObject("ADODB.Connection")
conn.Open "Provider=SQLOLEDB;Data Source=your_server;Initial Catalog=your_db;User ID=your_user;Password=your_password;"
Set cmd = Server.CreateObject("ADODB.Command")
cmd.ActiveConnection = conn
cmd.CommandText = "INSERT INTO your_table (field1, field2) VALUES (?, ?)"
cmd.Parameters.Append cmd.CreateParameter("@field1", adVarChar, adParamInput, 50, Request.Form("field1"))
cmd.Parameters.Append cmd.CreateParameter("@field2", adVarChar, adParamInput, 50, Request.Form("field2"))
cmd.Execute
conn.Close
Set conn = Nothing
%>