I have the following SQL statement "
searchRS = "Select * FROM staff where staffname like '%" & request.form("inputsearch") & "%' order by staffname" & request("order_var")" It is a search box on my website that displays whatever the user types in. The only problem is it displays everything...