How to use ASP variables in SQL statement

Question

<%
postit = request.querystring(\"thispost\")
response.write(postit)
%> 

postit is the v

Answer 1

Add a parameter to the SQL:

delCmd.CommandText="DELETE * FROM post WHERE (pos_ID = ?)"
delCmd.Parameters.Append delCmd.CreateParameter("posid", adInteger, adParamInput)   ' input parameter
delCmd.Parameters("posid").Value = postit