Adventure Works Sign Up Page

<% msg="" Action = Left(UCase(Request("Action")),5) REM Do Some form validation If Action = "ENTER" Then If Request("CompanyName") = "" OR _ Request("ContactFirstName") = "" OR _ Request("ContactLastName") = "" OR _ Request("BillingAddress") = "" OR _ Request("City") = "" OR _ Request("StateOrProvince") = "" OR _ Request("PostalCode") = "" OR _ Request("Country") = "" OR _ Request("PhoneNumber") = "" OR _ Request("EmailAddress") = "" OR _ Request("LevelOfExperience") = "" Then msg="All fields must have a valid non-empty response." End If REM The form is valid and no missing fields If msg = "" Then sql = "insert into Customers (" &_ "CompanyName, " &_ "ContactFirstName, " &_ "ContactLastName, " &_ "BillingAddress, " &_ "City, " &_ "StateOrProvince, " &_ "PostalCode, " &_ "Country, " &_ "PhoneNumber, " &_ "EmailAddress, " &_ "LevelOfExperience) " &_ "VALUES ( " sql = sql & CheckString(Request("CompanyName"),",") sql = sql & CheckString(Request("ContactFirstName"),",") sql = sql & CheckString(Request("ContactLastName"),",") sql = sql & CheckString(Request("BillingAddress"), ",") sql = sql & CheckString(Request("City"), ",") sql = sql & CheckString(Request("StateorProvince"), ",") sql = sql & CheckString(Request("PostalCode"), ",") sql = sql & CheckString(Request("Country"), ",") sql = sql & CheckString(Request("PhoneNumber"), ",") sql = sql & CheckString(Request("EmailAddress"), ",") sql = sql & CheckString(Request("LevelOfExperience"), ")") Conn.Execute(sql) set rs = Conn.Execute("select max(CustomerID) from Customers") CustomerID = rs(0) rs.Close Session("CustomerID")= CustomerID Session("CustomerFirstName") = Request("ContactFirstName").Item Response.Cookies("CustomerFirstName") = Request("ContactFirstName") Response.Cookies("CustomerFirstName").Expires = Date+365 Response.Cookies("CustomerFirstName").Path = "/AdvWorks" Response.Cookies("CustomerID") = CustomerID Response.Cookies("CustomerID").Expires = Date+365 Response.Cookies("CustomerID").Path = "/AdvWorks" Response.Redirect "/AdvWorks/Equipment/Shipping.asp" End If 'msg = "" End If 'Action = "ENTER" %> Adventure Works Sign Up Page <% REM Column Span Value %> <% HTML_CS = 3 %> <% HTML_INDENT = FALSE %>

<% ContactFirstName = Request("ContactFirstName") ' Check to see if this is a customer that got deleted from the database. If so ' they need to fill in the information again if Session("CustomerID") = -1 then Response.Write "" & Session("CustomerFirstName") & ", we need to update your information in our database

" ContactFirstName = Session("CustomerFirstName") end if %> So that we can service you better, please, take some time now to fill out the following form.