Using A Select Statement.

In this example we are selecting a record based on a name that we already have.
We are basically doing a parameterized query.

The SQL statement is the key and by changing that you can search however you want. This is just an example.

<% FULLNAME = "Teddy Gordon" %>

<%
' declaring variables
' not neccesary but a good habit
Dim DataConn
Dim CmdSimpleSelect
Dim MYSQL
   
Set DataConn = Server.CreateObject("ADODB.Connection")
Set CmdSimpleSelect = Server.CreateObject("ADODB.Recordset")
   
' The line below shows how to use a system DSN instead of a DNS-LESS connection
' DataConn.Open "DSN=System_DSN_Name"
DataConn.Open "DBQ=" & Server.Mappath("../_database/database.mdb") & ";Driver={Microsoft Access Driver (*.mdb)};"
   
MYSQL = "SELECT ID, NAME, EMAIL, MESSAGE FROM some_table WHERE (NAME = '" & FULLNAME & "')"
   
CmdSimpleSelect.Open MYSQL, DataConn
%>

<%= CmdSimpleSelect("ID") %><br>
<%= CmdSimpleSelect("NAME") %><br>
<%= CmdSimpleSelect("MESSAGE") %><br>
<%= CmdSimpleSelect("EMAIL") %><br>

<%
' closing objects and setting them to nothing
' not neccesary but a good habit
CmdSimpleSelect.Close
Set CmdSimpleSelect = Nothing
DataConn.Close
Set DataConn = Nothing
%>