process.asp

<%
if strAction = "process" then

        sONEpostof              = RemoveHTML(KillChars(Trim(Replace(Request.form("postof"), "'", "''"))))
        sONEtitle               = RemoveHTML(KillChars(Trim(Replace(Request.form("title"), "'", "''"))))
        sONEforename            = RemoveHTML(KillChars(Trim(Replace(Request.form("forename"), "'", "''"))))
        sONEsurname             = RemoveHTML(KillChars(Trim(Replace(Request.form("surname"), "'", "''"))))
        sONEpreviousname        = RemoveHTML(KillChars(Trim(Replace(Request.form("previousname"), "'", "''"))))
        sONEaddress             = RemoveHTML(KillChars(Trim(Replace(Request.form("address"), "'", "''"))))
        sONEtown                = RemoveHTML(KillChars(Trim(Replace(Request.form("town"), "'", "''"))))
        sONEcounty              = RemoveHTML(KillChars(Trim(Replace(Request.form("county"), "'", "''"))))
        sONEpostcode            = RemoveHTML(KillChars(Trim(Replace(Request.form("postcode"), "'", "''"))))
        sONEhome                = RemoveHTML(KillChars(Trim(Replace(Request.form("home"), "'", "''"))))
        sONEmobile              = RemoveHTML(KillChars(Trim(Replace(Request.form("mobile"), "'", "''"))))
        sONEwork                = RemoveHTML(KillChars(Trim(Replace(Request.form("work"), "'", "''"))))
        sONEtelpreferred        = RemoveHTML(KillChars(Trim(Replace(Request.form("telpreferred"), "'", "''"))))
        sONEworkcontact         = RemoveHTML(KillChars(Trim(Replace(Request.form("workcontact"), "'", "''"))))
        sONEemail               = RemoveHTML(KillChars(Trim(Replace(Request.form("email"), "'", "''"))))
        sONEpassword            = RemoveHTML(KillChars(Trim(Replace(Request.form("password"), "'", "''"))))
        sONEnatno               = RemoveHTML(KillChars(Trim(Replace(Request.form("mobile"), "'", "''"))))

        sONEqts                 = RemoveHTML(KillChars(Trim(Replace(Request.form("qts"), "'", "''"))))
        sONEqtsaward            = RemoveHTML(KillChars(Trim(Replace(Request.form("qtsaward"), "'", "''"))))
        sONEqtsno               = RemoveHTML(KillChars(Trim(Replace(Request.form("qtsno"), "'", "''"))))
        sONEdfecomplete         = RemoveHTML(KillChars(Trim(Replace(Request.form("dfecomplete"), "'", "''"))))
        sONEdfedate             = RemoveHTML(KillChars(Trim(Replace(Request.form("dfedate"), "'", "''"))))
        sONEgtcref              = RemoveHTML(KillChars(Trim(Replace(Request.form("gtcref"), "'", "''"))))
        sONEgtcreg              = RemoveHTML(KillChars(Trim(Replace(Request.form("gtcreg"), "'", "''"))))
        sONEgtccontick          = RemoveHTML(KillChars(Trim(Replace(Request.form("gtccontick"), "'", "''"))))
        sONEgtccondition        = RemoveHTML(KillChars(Trim(Replace(Request.form("gtccondition"), "'", "''"))))

        sONEpresentpost         = RemoveHTML(KillChars(Trim(Replace(Request.form("presentpost"), "'", "''"))))
        sONEappointed           = RemoveHTML(KillChars(Trim(Replace(Request.form("appointed"), "'", "''"))))
        sONEschoolname          = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolname"), "'", "''"))))
        sONEschooltype          = RemoveHTML(KillChars(Trim(Replace(Request.form("schooltype"), "'", "''"))))
        sONEschooladdress       = RemoveHTML(KillChars(Trim(Replace(Request.form("schooladdress"), "'", "''"))))
        sONEschooltown          = RemoveHTML(KillChars(Trim(Replace(Request.form("schooltown"), "'", "''"))))
        sONEschoolcounty        = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolcounty"), "'", "''"))))
        sONEschoolpostcode      = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolpostcode"), "'", "''"))))
        sONEschoolgender        = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolgender"), "'", "''"))))
        sONEschoolroll          = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolroll"), "'", "''"))))
        sONEschoolage           = RemoveHTML(KillChars(Trim(Replace(Request.form("schoolage"), "'", "''"))))

        sONEpoints              = RemoveHTML(KillChars(Trim(Replace(Request.form("points"), "'", "''"))))
        sONEsalarybasic         = RemoveHTML(KillChars(Trim(Replace(Request.form("salarybasic"), "'", "''"))))
        sONEsalaryplus          = RemoveHTML(KillChars(Trim(Replace(Request.form("salaryplus"), "'", "''"))))
        sONEcsaemploy           = RemoveHTML(KillChars(Trim(Replace(Request.form("csaemploy"), "'", "''"))))
        sONEotheraddress        = RemoveHTML(KillChars(Trim(Replace(Request.form("otheraddress"), "'", "''"))))
        sONEothertown           = RemoveHTML(KillChars(Trim(Replace(Request.form("othertown"), "'", "''"))))
        sONEothercounty         = RemoveHTML(KillChars(Trim(Replace(Request.form("othercounty"), "'", "''"))))
        sONEotherpostcode       = RemoveHTML(KillChars(Trim(Replace(Request.form("otherpostcode"), "'", "''"))))
        sONEothertel            = RemoveHTML(KillChars(Trim(Replace(Request.form("othertel"), "'", "''"))))

        appsDate                = year(now) & "-" & month(now) & "-" & day(now)

    SQLch = "SELECT UsersRef FROM teachapp WHERE UsersRef = '" & UsersRef & "'"
    Set RSch = Conn.execute(SQLch)

    if RSch.EOF then

        SQLa = "INSERT into teachapp (appsDate, UsersRef, sONEpostof, sONEtitle, sONEforename, sONEsurname, sONEpreviousname, sONEaddress, sONEtown, sONEcounty, sONEpostcode, sONEhome, sONEmobile, sONEwork, sONEtelpreferred, sONEworkcontact, sONEemail, sONEpassword, sONEnatno, sONEqts, sONEqtsaward, sONEqtsno, sONEdfecomplete, sONEdfedate, sONEgtcref, sONEgtcreg, sONEgtccontick, sONEgtccondition, sONEpresentpost, sONEappointed, sONEschoolname, sONEschooltype, sONEschooladdress, sONEschooltown, sONEschoolcounty, sONEschoolpostcode, sONEpoints, sONEschoolgender, sONEschoolroll, sONEschoolage, sONEsalarybasic, sONEsalaryplus, sONEcsaemploy, sONEotheraddress, sONEothertown, sONEothercounty, sONEotherpostcode, sONEothertel) VALUES ('"&appsDate&"','"&UsersRef&"','"& sONEpostof &"','"&sONEtitle&"','"&sONEforename&"','"&sONEsurname&"','"&sONEpreviousname&"','"&sONEaddress&"','"&sONEtown&"','"&sONEcounty&"','"&sONEpostcode&"','"&sONEhome&"','"&sONEmobile&"' ,'"&sONEwork&"','"&sONEtelpreferred&"','"&sONEworkcontact&"','"&sONEemail&"','"&sONEpassword&"','"&sONEnatno&"','"&sONEqts&"','"&sONEqtsaward&"','"&sONEqtsno&"','"&sONEdfecomplete&"','"&sONEdfedate&"','"&sONEgtcref&"','"&sONEgtcreg&"' ,'"&sONEgtccontick&"','"&sONEgtccondition&"','"&sONEpresentpost&"','"&sONEappointed&"','"&sONEschoolname&"','"&sONEschooltype&"','"&sONEschooladdress&"','"&sONEschooltown&"','"&sONEschoolcounty&"','"&sONEschoolpostcode&"','"&sONEschoolgender&"','"&sONEschoolage&"','"&sONEschoolroll&"','"&sONEpoints&"','"&sONEsalarybasic&"','"&sONEsalaryplus&"','"& sONEcsaemploy &"','"& sONEotheraddress &"','"& sONEothertown &"','"& sONEothercounty &"','"& sONEotherpostcode &"','"& sONEothertel &"');"
        Conn.execute (SQLa)

    else

        SQLu = "update teachapp set appsDate='"&appsDate&"',UsersRef='"&UsersRef&"',sONEpostof='"&sONEpostof&"',sONEtitle='"&sONEtitle&"',sONEforename='"&sONEforename&"',sONEsurname='"&sONEsurname&"',sONEpreviousname='"&sONEpreviousname&"',sONEaddress='"&sONEaddress&"',sONEtown='"&sONEtown&"',sONEcounty='"&sONEcounty&"',sONEpostcode='"&sONEpostcode&"',sONEhome='"&sONEhome&"',sONEmobile='"&sONEmobile&"',sONEwork='"&sONEwork&"',sONEtelpreferred='"&sONEtelpreferred&"',sONEworkcontact='"&sONEworkcontact&"',sONEemail='"&sONEemail&"',sONEpassword='"&sONEpassword&"',sONEqts='"&sONEqts&"',sONEqtsaward='"&sONEqtsaward&"',sONEqtsno='"&sONEqtsno&"',sONEdfecomplete='"&sONEdfecomplete&"',sONEdfedate='"&sONEdfedate&"',sONEgtcref='"&sONEgtcref&"',sONEgtcreg='"&sONEgtcreg&"',sONEgtccontick='"&sONEgtccontick&"',sONEgtccondition='"&sONEgtccondition&"',sONEpresentpost='"&sONEpresentpost&"',sONEappointed='"&sONEappointed&"',sONEschoolname='"&sONEschoolname&"',sONEschooltype='"&sONEschooltype&"',sONEschooladdress='"&sONEschooladdress&"',sONEschooltown='"&sONEschooltown&"',sONEschoolcounty='"&sONEschoolcounty&"',sONEschoolpostcode='"&sONEschoolpostcode&"',sONEschoolgender='"&sONEschoolgender&"',sONEschoolroll='"&sONEschoolroll&"',sONEschoolage='"&sONEschoolage&"',sONEpoints='"&sONEpoints&"',sONEsalarybasic='"&sONEsalarybasic&"',sONEsalaryplus='"&sONEsalaryplus&"',sONEcsaemploy='"&sONEcsaemploy&"',sONEotheraddress='"&sONEotheraddress&"',sONEothertown='"&sONEothertown&"',sONEothercounty='"&sONEothercounty&"',sONEotherpostcode='"&sONEotherpostcode&"',sONEothertel='"&sONEothertel&"'"
        Conn.execute (SQLu)

    end if

%>