Hi,
Thank  you for the reply. I am using a function to avoid injection like ColorC=Sqlinj(Request.QueryString("Color")) that removes the harmful statements.
I am not very good at coding. Can you...