关于sql语句出错的问题

[flashyy]

sql="SELECT * FROM user WHERE username='" & uname & "' AND password='" & pwd & "'"

这一句哪里错了请大家指点？我看看是很标准的啊。

[heshengfen123]

迟来的接分人

[peijunfeng]

sql="SELECT * FROM [user] WHERE username='" & uname & "' AND [password]='" & pwd & "'"


另外，这个判断用户名和密码的语句，容易被SQL注入，建议分开写

[fredtaylor]

迟到的接分人~！

[gingerkang]

[user][password]

[liyong888_8]

sql="SELECT * FROM [user] WHERE username='" & uname & "' AND password='" & pwd & "'"

[mustapha]

user表是系统默认表
sql="SELECT * FROM [user] WHERE username='" & uname & "' AND password='" & pwd & "'"
或者改个表名

[njtongfei]

是表名的问题 user是关键字 把表名换一下 就可以了

[flashyy]

呵呵，太对了，谢谢！