<% Param = Request.QueryString("Param") Data = Request.QueryString("Data") %> <% If IsObject(Session("trade_conn")) Then Set conn = Session("trade_conn") Else Set conn = Server.CreateObject("ADODB.Connection") conn.open "trade","","" Set Session("trade_conn") = conn End If %> <% sql = "SELECT * FROM [data]" If cstr(Param) <> "" And cstr(Data) <> "" Then sql = sql & " WHERE [" & cstr(Param) & "] = " & cstr(Data) End If Set rs = Server.CreateObject("ADODB.Recordset") rs.Open sql, conn, 3, 3 %> <% On Error Resume Next rs.MoveFirst do while Not rs.eof %> <% rs.MoveNext loop%>

data

Name	Email
<%=Server.HTMLEncode(rs.Fields("Name").Value)%>	<%=Server.HTMLEncode(rs.Fields("Email").Value)%>