Защита от хакеров корпоративных сетей

<% SQLquery=“SELECT * FROM phonetable WHERE name=’” & _

request.querystring(“name”) & “‘”

Set Conn = Server.CreateObject(“ADODB.Connection”)

Conn.Open “ DSN=websql;UID=webserver;PWD=w3bs3rv3r;DATABASE=data”

Set rec = Server.CreateObject(“ADODB.RecordSet”)

rec.ActiveConnection=Conn

rec.Open SQLquery %>