遗留ASP版本2网站的问题

时间：2015-08-21 02:50:31

标签： vbscript asp-classic

我们有一个旧网站，我们正试图复活。一切都有效，除了这一页

  

错误：-2147217900 - [Microsoft] [ODBC SQL Server驱动程序] [SQL Server]
  过程或函数sp_XXXX_XXX_Order_Information指定了太多参数。

     

Microsoft VBScript运行时错误＆＃39; 800a01a8＆＃39;
  需要的对象：＆＃39; openRecordSet（...）＆＃39;   /admin/XXXX/order_info.asp，第11行

<!--#include virtual="/includes/scripts/functions.asp"-->
<%
    SetUserLevel(" 2 3 8 ")

    QSON        = prepareSQL(Request.QueryString("ON"))

    If (Len(QSON) = 0) Then Response.Redirect("/admin/customercare/")

    Dim objConnection, objRecordset, BGColor, CC_Count, PP_Count, Ticket_Count, Tracking_Count, History_Type, User_Notes, UID, Trouble_Tickets
    Set objConnection   = openConnectionAdmin()
    Set objRecordset    = openRecordset("EXEC sp_XXXX_XXX_Order_Information '" & QSON & "'," & Session("User_ID"), objConnection)   

    If (objRecordset.State = 0) Then
        Set objRecordset    = Nothing
        Set objConnection   = Nothing
        Response.Write("Order Not Found")
        Response.End
    End If

    UID     = objRecordset("User_ID")
    CC_Count    = objRecordset("Credit_Card_Count")
    VS_Count    = objRecordset("VeriSign_Count")
    PP_Count    = objRecordset("PayPal_Count")
    Tracking_Count  = objRecordset("Tracking_Numbers")
    User_Notes  = objRecordset("User_Notes")
    Trouble_Tickets = objRecordset("Trouble_Tickets")
    History_Type    = objRecordset("History_Type_ID")

    Set objRecordset = objRecordset.NextRecordset()

    If (objRecordset.State = 0) Then
        Set objRecordset    = Nothing
        Set objConnection   = Nothing
        Response.Write("Order Not Found")
        Response.End
    End If
%>
<HTML>
<TITLE>iXXXX.XX- Customer Care Center</TITLE>
<HEAD>
<LINK REL="STYLESHEET" HREF="/admin/subpage.css" TYPE="text/css">
<SCRIPT LANGUAGE="JavaScript" TYPE="text/javascript">
<!--
function popUp2(url, height, width) 
{
  sealWin=window.open(url,"win",'height=' + height + ',width=' + width + ', toolbar=0,location=0,directories=0,status=1,menubar=0,scrollbars=1,resizable=1');
  self.name = "mainWin";
}

function charcount()
{
    if (DH)
    {
        cr = fd('cd',0)
        ct = document.Note.Note_Detail.value.length;

        if (ct > 2000) cr.innerHTML = '<FONT COLOR="#660000">' + ct + ' characters (of 2000)</FONT>';
        else if (ct > 1800) cr.innerHTML = '<FONT COLOR="#666600">' + ct + ' characters (of 2000)</FONT>';
        else cr.innerHTML = ct + ' characters (of 2000)';
    }
}

//-->
</SCRIPT>
<!--#include virtual="/admin/includes/info_popin.inc"-->
<!--#include virtual="/admin/includes/edit_fields.inc"-->
<DIV ID="info_popin" CLASS="tip"><TABLE><div style='position:relative;bottom:75px;left:150px;padding:1px;background-color:#EEEEEE; font-family: arial; font-size: 10pt;'></div></TABLE></DIV>
</HEAD>
<BODY BGCOLOR="#FFFFFF">
    <!--#include virtual="/admin/includes/customercareheader.inc"-->

    <P>
    <FORM NAME="Shipping" METHOD=POST ACTION="order_shipping_update.asp">
    <INPUT TYPE=HIDDEN NAME=ON VALUE="<%= QSON %>">
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH COLSPAN="3">Order #<%= QSON %><BR><BR></TH></TR>
    <TR>
    <%
        Response.Write objRecordset("TableRow")
        Set objRecordset = objRecordset.NextRecordset()
    %>
    </TR>
    <TR><TD COLSPAN="3" ALIGN="CENTER"><DIV ID=sd STYLE="display: none;"><INPUT TYPE=BUTTON ONCLICK="document.Shipping.reset(); history.go();" VALUE="Cancel"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <INPUT TYPE=SUBMIT VALUE="Update"></DIV></TD></TR>
    </TABLE>
    </FORM>
    </P>

    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH ALIGN="LEFT">Product</TH><TH ALIGN="LEFT">Dosage</TH><TH>Count</TH><TH>Quantity</TH><TH ALIGN="RIGHT">Amount</TH></TR>
    <%
        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    </TABLE>
    </P>


    <%
        If (Tracking_Count > 0 And (History_Type = 13 OR History_Type = 24)) Then
    %>
    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH ALIGN="LEFT">Billed</TH><TH ALIGN="LEFT">UPS Tracking Number</TH><TH ALIGN="RIGHT">Notification Email</TH></TR>
    <%
        Set objRecordset = objRecordset.NextRecordset()

        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    </TABLE>
    </P>
    <%
        End If
    %>



    <%
        If (PP_Count > 0) Then
    %>
    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH ALIGN="LEFT">Date</TH><TH ALIGN="LEFT">PayPal Account</TH><TH ALIGN="LEFT">Status</TH><TH ALIGN="LEFT"><BR></TH><TH ALIGN="RIGHT">Amount</TH></TR>
    <%
        Set objRecordset = objRecordset.NextRecordset()

        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    </TABLE>
    </P>
    <%
        End If
    %>



    <%
        If (CC_Count > 0) Then
    %>
    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH ALIGN="LEFT">Date</TH><TH ALIGN="LEFT"><NOBR>Credit Response</NOBR></TH><TH ALIGN="CENTER" COLSPAN="2">AVS and CVV2 Responses</TH><TH ALIGN="RIGHT">Amount</TH></TR>
    <%
        Set objRecordset = objRecordset.NextRecordset()

        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    </TABLE>
    </P>
    <%
        End If
    %>



    <%
        If (VS_Count > 0) Then
    %>
    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH ALIGN="LEFT">Date</TH><TH ALIGN="LEFT">Reference</TH><TH ALIGN="CENTER">Result</TH><TH>AVS</TH><TH>Type</TH><TH ALIGN="RIGHT">Amount</TH></TR>
    <%
        Set objRecordset = objRecordset.NextRecordset()

        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    <TR><TD COLSPAN="6" ALIGN="CENTER" STYLE="font-size: 8pt;">Only transactions in <B>BOLD</B> have been accepted and processed.</TD></TR>
    </TABLE>
    </P>
    <%
        End If
    %>



    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH COLSPAN="2">Order Questionnaire</TH></TR>
    <%
        Set objRecordset = objRecordset.NextRecordset()

        Do Until objRecordset.EOF
            BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
            Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
            objRecordset.MoveNext
        Loop
    %>
    </TABLE>
    </P>


    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH COLSPAN="3">Notes Created on this Order</TH></TR>
    <TR><TH ALIGN="LEFT">Date</TH><TH ALIGN="LEFT">Short Detail</TH><TH ALIGN="RIGHT">Author</TH></TR>
    <%
        If (User_Notes > 0) Then

            Set objRecordset = objRecordset.NextRecordset()

            Do Until objRecordset.EOF
                BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
                Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
                objRecordset.MoveNext
            Loop
        Else
            Response.Write "<TR><TD COLSPAN=""3"" ALIGN=""CENTER"">There are no notes on this account.</TD></TR>"
        End If
    %>
    <TR>
    <TD COLSPAN="3">
        <DIV ID=no ALIGN="CENTER" STYLE="font-size: 8pt;"><A ONCLICK="edit('no','ns');"><BR>Add Note to this Client</A></DIV>
        <DIV ID=noe STYLE="display: none;">
            <FORM NAME="Note" METHOD=POST ACTION="customer_add_note.asp">
            <INPUT TYPE=HIDDEN NAME=UID VALUE="<%= UID %>">
            <INPUT TYPE=HIDDEN NAME=ON VALUE="<%= QSON %>">
            <BR><B>Adding Note</B>:<BR>
            <TEXTAREA NAME="Note_Detail" COLS=50 ROWS=5 STYLE="width:580px;" ONKEYUP="charcount();"></TEXTAREA>
            <DIV ID=cd ALIGN="CENTER">0 characters (of 2000)</DIV>
            <DIV ID=ns  STYLE="display: none;" ALIGN="CENTER"><INPUT TYPE=RESET VALUE="Clear"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <INPUT TYPE=SUBMIT VALUE="Add Note"><BR><BR></DIV>
            </FORM>
        </DIV>
    </TD>
    </TR>
    </TABLE>
    </P>



    <%
    If (Session("User_Level") = " 1 ") Then
    %>
    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR>
    <TD>
        <DIV ID=de ALIGN="CENTER" STYLE="font-size: 8pt;"><A ONCLICK="edit('de','ds');">Send Pre-made Decline to this Client</A></DIV>
        <DIV ID=dee STYLE="display: none;">
            <CENTER><B>Send Decline</B></CENTER>

            <FORM NAME="DeclineLetter" METHOD=POST ACTION="customer_send_decline.asp">
            <INPUT TYPE=HIDDEN NAME=ON VALUE="<%= QSON %>">

            <P STYLE="margin-left: 30px;">
            <%
                Dim objDeclineRecordset
                Set objDeclineRecordset = openRecordset("EXEC sp_Doctor_Get_Declines", objConnection)
                Do Until objDeclineRecordset.EOF
                    Response.Write objDeclineRecordset("OptionRow") & vbCrLf
                    objDeclineRecordset.MoveNext
                Loop
                objDeclineRecordset.Close
                Set objDeclineRecordset = Nothing
            %>

            </P>

            <DIV ID=ds  STYLE="display: none;" ALIGN="CENTER"><INPUT TYPE=SUBMIT VALUE="Send"><BR><BR></DIV>
            </FORM>
        </DIV>
    </TD>
    </TR>
    </TABLE>
    </P>
    <%
    End If
    %>



    <P>
    <TABLE WIDTH="600" CELLPADDING="0" CELLSPACING="0" ALIGN="CENTER" CLASS="CCListTbl">
    <TR><TH COLSPAN="4">Trouble Tickets on this Order</TH></TR>
    <TR><TH ALIGN="LEFT">Date</TH><TH ALIGN="LEFT">Ticket</TH><TH ALIGN="LEFT">Last Short Detail</TH><TH></TH><TH ALIGN="RIGHT">Last Author</TH></TR>
    <%
        If (Trouble_Tickets > 0) Then

            Set objRecordset = objRecordset.NextRecordset()

            Do Until objRecordset.EOF
                BGColor = IIF(BGColor = "DEDEDE", "EFEFEF", "DEDEDE")
                Response.Write "<TR BGCOLOR=""" & BGColor & """>" & objRecordset("TableRow") & "</TR>" & vbCrLf
                objRecordset.MoveNext
            Loop
        Else
            Response.Write "<TR><TD COLSPAN=""5"" ALIGN=""CENTER"">There are no trouble tickets on this order.</TD></TR>"
        End If
    %>
    <TR><TD COLSPAN="5" ALIGN="CENTER"><BR><A HREF="trouble/add_ticket.asp?UID=<%= UID %>&ON=<%= QSON %>" STYLE="font-size: 8pt;">Create a New Trouble Ticket for this Order</A></TD></TR>
    </TABLE>
    </P>
    <BR><BR><BR><BR><BR><BR><BR><BR>

</BODY>
</HTML>
<%
    objRecordset.Close
    Set objRecordset    = Nothing
    Set objConnection   = Nothing
%>

1 个答案:

答案 0 :(得分：0)

因此，您的错误表明在此行上调用存储过程的参数太多：

EXEC sp_XXXX_XXX_Order_Information '" & QSON & "'," & Session("User_ID")

我会反复检查数据库中的存储过程sp_XXXX_XXX_Order_Information。它应该接受QSON和UserID（或类似）的2个变量。

此外，我会检查您（a）在该行上调用存储过程的QSON和Session("User_ID")的值。 我还要检查这两个变量的值是否需要消毒。例如，如果QSON的值为test','ing，则可能会无意中添加另一个变量。你需要逃避这些。

相关问题
最新问题