%
Dim ID
ID = Request.QueryString("ID")
IF ID = "" Then ID = 0
If Not IsNumeric(ID) Then ID = 0
ID = Int(ID)
SQL = "SELECT * FROM [Product] WHERE ID = " & ID
Set RS = Server.CreateObject("ADODB.Recordset")
RS.Open SQL,Connstr,1,1
IF RS.EOF Then
Response.Write ""
Response.End
End If
%>