%Response.Buffer=TRUE%> <% dir=Request.QueryString("dir") pic=Request.QueryString("pic") %> <% SQL="SELECT * FROM card where name='"&pic&"'" Set rs = Conn.Execute(SQL) %>