Forums

This topic is locked

Changing the way cs3 generates recordesets

Posted 20 Nov 2007 21:37:49
1
has voted
20 Nov 2007 21:37:49 andy mogg posted:
HI

I have recently upgraded to CS3 from Dreamweaver 8 and when i create a new recordset using server behaviours it looks like


Code:
Dim rsNews
Dim rsNews_cmd
Dim rsNews_numRows

Set rsNews_cmd = Server.CreateObject ("ADODB.Command"
rsNews_cmd.ActiveConnection = MM_studio_STRING
rsNews_cmd.CommandText = "SELECT NewsActive, NewsTitle FROM News WHERE NewsActive = True"
rsNews_cmd.Prepared = true

Set rsNews= rsTicker_cmd.Execute
rsNews_numRows = 0

as opposed to


Code:
Dim rsNews
Dim rsNews_numRows

Set rsNews= Server.CreateObject("ADODB.Recordset"
rsNews.ActiveConnection = MM_studio_STRING
rsNews.Source = "SELECT NewsActive, NewsTitle FROM News WHERE NewsActive = True"
rsNews.CursorType = 0
rsNews.CursorLocation = 2
rsNews.LockType = 1
rsNews.Open()

rsNews_numRows = 0
which is created by DW8, both using asp vb script

anyone know why CS3 has changed the way it works and if it is possible to change it back

Thanks

Replies

Replied 04 Dec 2007 12:33:48
04 Dec 2007 12:33:48 Georgi Kralev replied:
Hi Andy,

The code of Recordset, Insert/Update Record and other database related Server behaviors were change from Dreamweaver 8.02 (Update).
This is due to SQL injection vulnerability in the previously used code.

The new code is also used into Dreamweaver CS3.

The following Adobe TechNote describe this issue in more details:
kb.adobe.com/selfservice/viewContent.do?externalId=581a553c

Regards,


Georgi Kralev

----------------------------------
Support - www.DMXzone.com
Replied 04 Feb 2008 11:27:33
04 Feb 2008 11:27:33 Dave Clarke replied:
I just figured out a workaround for this issue

www.dmxzone.com/forum/topic.asp?topic_id=40559

UD4|DW8.02|DWCS3|ASP|VBScript|IIS5.1|Access|WinXPPro & WinXPHome.
www.reunite.co.uk
www.dogworld-uk.com

Reply to this topic