<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>
<!--#include file="dbshows.asp" -->
<!--#include file="includeSqlinjection.asp" -->

<% 

Set Conexao = Server.CreateObject("ADODB.Connection")
Conexao.Open db

url = Request.Querystring("ID") 
'hit = +1 

'altera
    sql = ""
    sql = sql & " UPDATE shows SET clicks = clicks +1 WHERE ID = " &validatxt(Request("ID"))& " "
	
set Rs = Conexao.execute(SQL)

Conexao.Close()
Set Conexao = Nothing
set Rs = Nothing
response.redirect("shows.asp?ID="&url&"")
	
%>