<%@ LANGUAGE = "VBScript" %> <% productid=valid_sql(request.querystring("productid")) if productid=null or productid="" or not(isnumeric(productid)) then response.redirect("error.asp?msg=" & Server.URLEncode("We have no record of the product you are looking for.")) end if 'get the relevant products details set rsprod=db.execute("SELECT * FROM products INNER JOIN categories ON products.catcode = categories.catcode WHERE productid = " & productid) if rsprod.eof then response.redirect("error.asp?msg=" & Server.URLEncode("We have no record of the product you are looking for.")) end if if request.querystring("wish")="add" then WISHLIST_add(productid) end if 'get names and codes of all products in that category set rscatlist=db.execute("select name,productid from products where catcode=" & rsprod("catcode") & " order by name") %> <% header categorymenu %>

<%= rsprod("catname") %> <% 'Display list of other products in category if not rscatlist.eof then rscatlist.movefirst while not rscatlist.eof %> "><%=rscatlist("name")%> <% rscatlist.movenext wend end if %>

<% = rsprod("image") %>

<%= rsprod("name") %> Price: <% if rsprod("saleprice")="" or rsprod("saleprice")=0 then %> <% =cursymbol & formatnumber(rsprod("price")) %> <% else %> <% =cursymbol & formatnumber(rsprod("price")) %> Sale Price: <% =cursymbol & formatnumber(rsprod("saleprice")) %> <% end if %> <%= rsprod("description") %> "> <% if not(WISHLIST_element(rsprod("productid"))) then %> &wish=add"> <% end if %>

<% footer %> <% db.close set db=nothing %>