Hi.

I am now designing a webpage for my local sports team, and I need some help with an SQL statment.
I have a page where users can view the stats of players. All information is stored in an access database, that is connected and working properly. My current SQL statment is:

SELECT * FROM mydatabase where playerID = 'player1'

and that will display 'Player 1s' records. Doing it this way I have to create a page for every player, and I don't want to do that. I want it so that when I type the address:

profiles.asp?playerID=player2, it will display 'Player 2s' records by modifying my SQL statment to : SELECT * FROM mydatabase where playerID = 'player2'

Then when I type: profiles.asp?playerID=player3, it will display 'Player 3s' records by modifying my SQL statment to: SELECT * FROM mydatabase where playerID = 'player3'

How can I do this. I am pretty sure I will have to request.querystring("playerID") but can't figure it out from there.

Any help?

Thank You.

You have the idea right on track - But I think you will have better response posting your question in ASP forum.

The SQL statement should be written to accept a URL parameter rather than a hard-coded value. For instance:

SELECT * FROM mydatabase where playerID = 'Request.Querystring("PlayerID")'

PHP - Why didn't you say so??

'SELECT * FROM my_table WHERE player_id = "' . addslashes($_GET['playerID']) . '"'

The addslashes() function is used to help prevent sql attacks. You can use a better method mysql_real_escape_string() if you are using PHP >= 4.3.0

MIDNIGHTBANDIT9vbmenu_register("postmenu_283243", true); is using ASP. Sorry, I'm responsible for this confusion. I thought I was replying to another message when I was talking about using PHP. So, I changed the post. This is my first time on the forum. Sorry.