关于ASP中查询语句的问题

  写了一个SQL语句，用于更新数据表，请各位看看是否是正确的。谢谢了。

    SQL code:

set sql=conn.exeucte("update table1 set otherinfo ='该产品已于'" & today & "'由'" & customer & "'转移至'" & Ncustomer & "'' where table1.keyword='" & keyword & "'")
set sql=nothing



    其中 today customer Ncustomer keyword都是变量。

---

VBScript code:
conn.exeucte("update table1 set otherinfo ='该产品已于" & today & "由" & customer & "转移至" & Ncustomer & "' where keyword='" & keyword & "'")

---

最好按下面这个写：
VBScript code:
conn.exeucte("update table1 set otherinfo ='该产品已于" & replace(today,"'","''") & "由" & replace(customer,"'","''") & "转移至" & replace(Ncustomer,"'","''") & "' where keyword='" & replace(keyword,"'","''") & "'")

<