% DIM sqlString DIM strSite DIM strHeader DIM strSubtitle DIM strBody strSite = Request.Form("SiteNumber") strHeader = Request.Form("Header") strSubtitle = Request.Form("Subtitle") strBody = Request.Form("Body") strHeader = Server.htmlEncode(strHeader) strHeader = Replace(strHeader, "'", "''") strSubtitle = Server.htmlEncode(strSubtitle) strSubtitle = Replace(strSubtitle, "'", "''") strBody = Server.htmlEncode(strBody) strBody = Replace(strBody, "'", "''") strBody = Replace(strBody, "|", "
") oConn.Open(sConnString) 'This opens the database. sqlString = "UPDATE Table1 SET Header = '"& strHeader &"', subtitle = '"& strSubtitle &"', body = '"& strBody &"'" ' sqlString = sqlString & "Major = '"& strMajor &"', Year = '"& strYear &"'" sqlString = sqlString & "WHERE Site = '"& strSite &"'" Set rConn = oConn.Execute(sqlString) ' Set rConn = oConn.Execute("SELECT * FROM Table1 ORDER BY LastName, FirstName") %>