Escaping apostrophes inserting into sql

  • Thread starter Thread starter mister-Ed
  • Start date Start date
M

mister-Ed

I have a datagrid, and when initializing my field variables, I need to
double up apostrophes so they are accepted into SQL dbase. In the line
below, i'm trying to do this with the Replace function, but i still
get an error when entering an apostrophe:

Dim sCompany As String = CType(e.Item.FindControl("textbox3"),
textbox).Text.Replace("'", "''")

???
Mr. Ed
 
Why don't you use parameterized queries, or stored Procedures?
That way, you don't need to worry about things like this, and your
application will be more secure also.

David Wier
http://aspnet101.com
http://iWritePro.com - One click PDF, convert .doc/.rtf/.txt to HTML with no
bloated markup
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Escaping apostrophe when inserting into sql database 2
apostrophe in parameterised SP call trouble 1
apostrophe in parameterised SP call trouble 3
How to read from data list it value into a label? 6
Why double escape for apostrophe? 2
ESCAPE the apostrophe 5
Best way to 'secure' SQL entries (stray quotes and such) 4
Using SQL to replace an apostrophe 1

Back
Top