query in ASP to SQL db

[amatuer]

<% Datum = "1/1/2005"
Datum = cdate(datum)
Datum2 = datum + 9


Datum = Month(Datum) & "-" & Day(Datum) & "-" & Year(Datum)
Datum2 = Month(Datum2) & "-" & Day(Datum2) & "-" & Year(Datum2)

sql = "SELECT R_Reenval.NAAM, R_Reenval.Jaar, R_Reenval.Maand,
R_Reenval.Dag, R_Reenval.Reenval_Silo, Sum(Reenval_Silo) AS
SumOfReenval_Silo FROM R_Reenval WHERE ((R_Reenval.NAAM)='klerksdorp')
AND (R_Reenval.Datum Between " & cdate(Datum) & " And " & cdate(Datum2)
& ") Group By R_Reenval.NAAM, R_Reenval.Jaar, R_Reenval.Maand,
R_Reenval.Dag, R_Reenval.Reenval_Silo ORDER BY Jaar, Maand, Dag" %>

I am tryng to query some data according to dates...No matter hw I
change the format of the date variables, my recordset still returns no
data.

Any ideas, suggestions please. Any help will be gr8ly appreciated..thanx

 

[Ray Costanzo [MVP]]

Tell us what kind of database you're using; that's quite important.

Ray at work

 

[Bob Barrows [MVP]]

<% Datum = "1/1/2005"
Datum = cdate(datum)
Datum2 = datum + 9


Datum = Month(Datum) & "-" & Day(Datum) & "-" & Year(Datum)
Datum2 = Month(Datum2) & "-" & Day(Datum2) & "-" & Year(Datum2)

sql = "SELECT R_Reenval.NAAM, R_Reenval.Jaar, R_Reenval.Maand,
R_Reenval.Dag, R_Reenval.Reenval_Silo, Sum(Reenval_Silo) AS
SumOfReenval_Silo FROM R_Reenval WHERE ((R_Reenval.NAAM)='klerksdorp')
AND (R_Reenval.Datum Between " & cdate(Datum) & " And " &
cdate(Datum2) & ") Group By R_Reenval.NAAM, R_Reenval.Jaar,
R_Reenval.Maand, R_Reenval.Dag, R_Reenval.Reenval_Silo ORDER BY Jaar,
Maand, Dag" %>

I am tryng to query some data according to dates...No matter hw I
change the format of the date variables, my recordset still returns no
data.

If, by "SQL db" you mean MS SQL Server, then:

Your use of dynamic sql is leaving you vulnerable to hackers using sql
injection:
http://mvp.unixwiz.net/techtips/sql-injection.html
http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=23

See here for a better, more secure way to execute your queries by using
parameter markers:
http://groups-beta.google.com/group/microsoft.public.inetserver.asp.db/msg/72e36562fee7804e

Personally, I prefer using stored procedures:
http://tinyurl.com/jyy0

 

[Daniel Crichton]

amatuer wrote on 18 Oct 2006 02:58:03 -0700:

<% Datum = "1/1/2005"
Datum = cdate(datum)
Datum2 = datum + 9

Datum = Month(Datum) & "-" & Day(Datum) & "-" & Year(Datum)
Datum2 = Month(Datum2) & "-" & Day(Datum2) & "-" & Year(Datum2)

sql = "SELECT R_Reenval.NAAM, R_Reenval.Jaar, R_Reenval.Maand,
R_Reenval.Dag, R_Reenval.Reenval_Silo, Sum(Reenval_Silo) AS
SumOfReenval_Silo FROM R_Reenval WHERE ((R_Reenval.NAAM)='klerksdorp')
AND (R_Reenval.Datum Between " & cdate(Datum) & " And " & cdate(Datum2)
& ") Group By R_Reenval.NAAM, R_Reenval.Jaar, R_Reenval.Maand,
R_Reenval.Dag, R_Reenval.Reenval_Silo ORDER BY Jaar, Maand, Dag" %>

I am tryng to query some data according to dates...No matter hw I
change the format of the date variables, my recordset still returns no
data.

Any ideas, suggestions please. Any help will be gr8ly appreciated..thanx

Don't use MM-DD-YYYY format for a start, it's ambiguous (depending on the
region settings, the day or month number could be switched). And don't
reconvert the dates back to VB date format using CDate in the query
construction. If you insist on not using a stored procedure then use an
unambiguous date format such as YYYYMMDD.

Dan