% id=request("id") if not IsNumeric(id) then response.redirect "error.asp" end if set rs=server.CreateObject("adodb.recordset") sql="select * from news where id="+id rs.open sql,conn,1,3 %>