用ASP做个查询系统
现想用asp做个简单的查询系统，结构如下：
1.cx.xls中内容：
NOYFXMMAxm01xm02xm03
序号月份姓名密码项目01项目01项目01
序号月份姓名密码项目01项目01项目01
001201006AAAAAA01xm01AAAxm02AAAxm03AAA
002201006BBBBBB01xm01BBBxm02BBBxm03BBB
003201006BBBCCC01xm01CCCxm02CCCxm03CCC
2.cx.mdb中内容：
IDNOYFXMMAxm01xm02xm03
1序号月份姓名密码项目01项目01项目01
2序号月份姓名密码项目01项目01项目01
3001201006AAAAAA01xm01AAAxm02AAAxm03AAA
4002201006BBBBBB01xm01BBBxm02BBBxm03BBB
5003201006BBBCCC01xm01CCCxm02CCCxm03CCC
3. index.asp中内容
<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>查询系统</title>
</head>
<body>
<table width='100%' height='100%' border='0' cellpadding='0' cellspacing='0'><tr><td>
<form name='Login' action='cx.asp' method='post' target='_parent' onSubmit='return CheckForm();'>
<table width='100%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td width='219' height='164' background='login_01.gif'></td>
<td width='64' height='164' background='login_02.gif'></td>
<td valign='top' background='login_03.gif'><table border='0' cellpadding='0' cellspacing='0'>
<tr>
<td><table width='100%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td width='270' height='79' background='login_04.gif'></td>
<td width='150' height='79' background='login_05.gif'></td>
<td valign='top'><table width='100%' border='0' cellpadding='0' cellspacing='0'>
<tr>
<td height='21'></td>
<td></td>
</tr>
<tr>
<td><input type='hidden' name='Action' value='Login' /><input type='image' name='Submit' src='login_06.gif' style='width:50px; HEIGHT: 50px;' /></td>
<td width='58' height='50' background='login_07.gif'></td>
</tr>
</table></td>
</tr>
</table></td>
</tr>
<tr>
<td height='85'><table border='0' cellspacing='0' cellpadding='0'>
<tr>
<td width='22' rowspan='2' valign='bottom'><img src='login_08.gif' alt='' width="20" height="30" /></td>
<td width='80'><font color='#ffffff'>姓名：</font></td>
<td width='22' rowspan='2' valign='bottom'><img src='login_09.gif' alt='' width="20" height="30" /></td>
<td width='80'><font color='#ffffff'>密码：</font></td>
</tr>
<tr>
<td><input name='UserName' type='text' id='UserName' maxlength='20' style='width:70px; BORDER-RIGHT: #F7F7F7 0px solid; BORDER-TOP: #F7F7F7 0px solid; FONT-SIZE: 9pt; BORDER-LEFT: #F7F7F7 0px solid; BORDER-BOTTOM: #c0c0c0 1px solid; HEIGHT: 16px; BACKGROUND-COLOR: #F7F7F7' onmouseover=''this.style.background='#ffffff';'' onmouseout=''this.style.background='#F7F7F7''' onFocus='this.select();'></td>
<td><input name='password' type='password' maxLength='20' style='width:70px; BORDER-RIGHT: #F7F7F7 0px solid; BORDER-TOP: #F7F7F7 0px solid; FONT-SIZE: 9pt; BORDER-LEFT: #F7F7F7 0px solid; BORDER-BOTTOM: #c0c0c0 1px solid; HEIGHT: 16px; BACKGROUND-COLOR: #F7F7F7' onmouseover=''this.style.background='#ffffff';'' onmouseout=''this.style.background='#F7F7F7''' onFocus='this.select();'></td>
</tr>
</table></td>
</tr>
</table></td>
</tr>
</table>
</form>
</td></tr></table>
</body>
</html>
4. cx.asp中内容：
<%@LANGUAGE="VBSCRIPT" CODEPAGE="65001"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>查询系统</title>
</head>
<body>
<table width="95%" border="0" cellpadding="0" cellspacing="0" align="center" valign="top">
<tr>
<td height="60"><div align="center"><font size="3" face="黑体">查询结果仅供参考</font></div></td>
</tr>
</table>
<%
dim conn
dim db
dim xm_t,ma_t
xm_t="a"+request.Form("xm")
ma_t="a"+request.Form("ma")
if xm_t="a" or ma_t="a" then
response.Redirect "index.asp?no=1"
end if
db="cx.mdb" '数据库文件位置
conn="DBQ="+server.mappath(""&db&"")+";DefaultDir=;DRIVER={Microsoft Access Driver (*.mdb)};"
Set rs= Server.CreateObject("ADODB.Recordset")
%>
<%
sql="SELECT * from gzcx where xm='"+request.Form("xm")+"' and ma='"+request.Form("ma")+"'"
rs.open sql,conn,2,2
%>
<table width="79%" border="0" align="center" cellpadding="4" cellspacing="0" height="357" bgcolor="#009999">
<%if rs.bof or rs.eof then%>
<tr>
<td colspan="3" align="center" height="32">姓名或密码错误，没找到人员的资料</td>
</tr>
<%else%>
<tr>
<td colspan="3" valign="top" bgcolor="#E7E7E7">查询项目</td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">序 号：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("no")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">月 份：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("yf")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">姓 名：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("xm")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">项目01：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("xm01")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">项目02：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("xm02")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<tr>
<td width="33%" valign="top" bgcolor="#E7E7E7">
<div align="right">项目03：</div> </td>
<td width="8%" valign="top" bgcolor="#E7E7E7"><%=rs("xm03")%></td>
<td width="59%" bgcolor="#33FFFF"> </td>
</tr>
<%end if
rs.close
set rs=nothing
%>
</table>
</table>
</body>
</html>
5. 问题：
在IIS中运行index.asp
输入姓名：AAA
输入密码：AAA01
按确定后就无法进入，不能正常显示了，地址栏中只显示：http://127.0.0.1/index.asp?no=1
请问上述代码中有什么地方出错了？望高人指点~~~~
[解决办法]
sql="SELECT * from gzcx where xm='"+request.Form("xm")+"' and ma='"+request.Form("ma")+"'"
参数能用+ ？应该用& 吧