% Response.Buffer = true Dim catid, strcat prodid = Request.QueryString("id") If prodid = "" OR (isNumeric(prodid) = false) Then Response.Redirect "ticketorderform.asp" End if 'procedure is called in the body, shows the product information sub productInfo(connObj,product) q = chr(34) set cmd = server.CreateObject("ADODB.Command") cmd.ActiveConnection = connObj cmd.CommandText = "qryProduct" cmd.CommandType = adCmdStoredProc set param = cmd.CreateParameter("prodID",adInteger,adParamInput,4) cmd.Parameters.Append(param) cmd("prodID") = Cint(product) set rsprod = server.CreateObject("ADODB.Recordset") set rsprod = cmd.Execute if not rsprod.EOF then strHTML = strHTML & "
"
strHTML = strHTML & "" & rsprod("cname") & "" strHTML = strHTML & "" & rsprod("cdescription") & " " strHTML = strHTML & "Price: " & FormatCurrency(rsprod("cprice"),2) & " |