Problem with Query String Method
Often time we use query string collection to retrieve an unique record from a table. Notice the following
piece of code -
Detail.asp?RecordID=200
Here we are passing a query string value called "RecordID" using the url. We then use the Query String collection "RecordID" to get the actual number -
<%
Dim RecordID
RecordID = Request.QueryString("RecordID")
%
The problem with the above method is that we are exposing "RecordID" to the public. Hence making easy to h...[ 查看全文 ]