怎样在SQL语句中加如变量就想存储过程一样的写法用@号....

[zhui19760820]

我想在ASP中执行一个登陆验证的SQL。但我不想拼SQL语句。我记得好象有一种用变量直接写在SQL语句的写法，请问谁能告诉我？
如
@username="aaaaa"
@password="sssss"
sql="select * from user where use=@username and psd=@password"
rs=conn.execute(sql)
类似的，我也不太清楚具体写法，请指教！！！

[zhui19760820]

斑竹会么请斑竹给我解决一下吧，先谢谢了

[ccmoon]

strSql = "DECLARE @username VARCHAR(255) "
strSql = strSql + "DECLARE @password VARCHAR(255) "
strSql = strSql +"SELECT @username ='aaaaa' "
strSql = strSql +"SELECT @password='sssss' "
strSql = strSql +"SELECT * from user where use=@username and psd=@password"

[junsisi]

username="aaaa"
password="ssss"
sql="select * from [user] where use='"&username&"' and psd='"&password&"'"
set rs=conn.execute(sql)

-------------------------------------------
试一试~~~~