to make parameterized have used command object, protect injection, after making parameterized it's not able connect db. not sure went wrong.
error :operation not allowed when object closed.
can me please in fixing issue ?
set dbconn = server.createobject("adodb.connection") set rs = server.createobject("adodb.recordset") dbconn.open application("sop_db_connectionstring"), _ application("sop_db_runtimeusername"), _ application("sop_db_runtimepassword") set cmdsql= server.createobject("adodb.command") sqlstmt = "select * parameters parameter ?" cmdsql.activeconnection = dbconn cmdsql.commandtext = sqlstmt cmdsql.commandtype = adcmdtext cmdsql.prepared = true ' needed if u plan reuse command cmdsql.parameters.refresh strsearch = "%conn%" set prmsql = cmdsql.createparameter("strval" , advarchar, adparaminput, 255,strsearch) cmdsql.parameters.append prmsql rs.cursortype = 3' adopenstatic rs.open cmdsql,dbconn if rs.bof , rs.eof ' if no connection found -->getting error here session("errortitle")="the initializing process" session("errortext")="connection failed- couldn't read sop parameters database" response.redirect "error.asp" else ' found record rs.movefirst while not rs.eof session(trim(rs.fields("parameter").value)) = trim(rs.fields("val").value) rs.movenext loop end if rs.close
