% ' ----------------------- SQL Injection Protection --------------- If Isnumeric(Request("reid")) = True Then Else Response.redirect "http://www.projectorreviews.com" End if If Isnumeric(Request("page")) = True Then Else Response.redirect "http://www.projectorreviews.com" End if ' ---------------------------------------------------------------- Set con = Server.CreateObject("ADODB.Connection") con.open "PRREVIEWS" reid = Request("reid") reid = Cint(reid) Set arttitle = con.execute("Select PK_ID, ProductName, PageTitle, Description, Keywords FROM Advice_Info_Titles WHERE PK_ID = " & reid) 'Response.write("" & arttitle("ProductName") & "") sql = "SELECT Advice_Info_Titles.PK_ID AS Advice_Info_Titles_PK_ID, Advice_Info_Titles.ProductName, Advice_Info_Sections.PK_ID " & _ "AS Advice_Info_Sections_PK_ID, FK_ID, SectionTitle, HTML FROM Advice_Info_Titles INNER " & _ "JOIN Advice_Info_Sections ON Advice_Info_Titles.PK_ID = Advice_Info_Sections.FK_ID " & _ "WHERE FK_ID = " & reid sPageURL = Request.ServerVariables("SCRIPT_NAME") iCurrentPage = Request.QueryString("page") If iCurrentPage = "" Or iCurrentPage = 0 Then iCurrentPage = 1 %>
")
Response.write("" & res("SectionTitle") & "
" & " " & res("HTML") & "")
' ////////////////////// Show Drop Down Menu
' /////////////// Forward Previous Buttons
MoveForward = iCurrentPage + 1
MoveBack = iCurrentPage - 1
If MoveBack < 1 Then
Else
MoveBackCode = "<--"
End if
If MoveForward > res.PageCount Then
Else
MoveForwardCode = "-->"
End if
Response.write("
" & MoveBackCode & " - " & MoveForwardCode) %> <% res.close Set res = nothing con.close Set con = nothing %>