sql = "select * from Products where ID in ("getID.Substring(0,getID.Length-1))")"这样写有错吗??

Question

<%@ language=vbscript %>
<%
dim StrId,sql
StrId=request("itemno")+","
Session("StrId")=StrId
if len(CStr(Session("StrId")))<>0 then
dim getID
getID=CStr(Session("StrId"))
set conn = Server.CreateObject("ADODB.Connection")
conn.Open "driver={Microsoft Access Driver (*.mdb)};dbq="&Server.MapPath("myDB/Datasource.mdb")
'sql = "select * from Products where ID="& getID' where ID in ("+getID.Substring(0,getID.Length-1)+")"
sql = "select * from Products where ID in ('"+getID.Substring(0,getID.Length-1))+"')"
set rs = Server.CreateObject("ADODB.RecordSet")
rs.Open sql,conn,1,3
%>

Answer 1

以上使我的源代码,我想实现:sql="select * from Products where ID in (3,8,9)"这样的效果

Answer 2

StrId=request("itemno")+","是接收上页传递的ID值且在后面添上","最终通过此函数getID.Substring(0,getID.Length-1))实现(3,8,9)效果