<%@ LANGUAGE="VBSCRIPT" %> <% Response.Buffer = TRUE Response.Clear Response.Expires = 0 session.LCID = Session("LCID") %> <% Product_ID= Request.QueryString("Product_ID") If Request.QueryString("ORDER_FLAG") = "1" Then Response.Redirect"order.asp" If Request.QueryString("ORDER_FLAG") = "0" Then Response.Redirect"default.asp" %> <% Dim DSN_Name DSN_Name = Session("DSN_Name") Set Connection = Server.CreateObject("ADODB.Connection") Connection.Open DSN_Name SQL="SELECT * FROM product WHERE PRODUCT_ID= '" & PRODUCT_ID & "'" Set RS = Connection.Execute(SQL) %> " method="POST"> " name="PRODUCT_ID<% = RS("PRODUCT_ID") %>"> <% Rs.Close Set RS=nothing Connection.Close Set Connection = nothing %>

	Details for Product ID#: <%=RS("PRODUCT_ID") %>
	Price: <%= FormatCurrency(RS("PRICE"),2) %>
	Description: <%=RS("DESCRIPTION") %>
	<%=RS("MESSAGE") %>
	Quantity