good ol forms 1

[Ablecken]

say i have a form that is sent directly to a database. ive gotten everything to work but the thing is that one of the fields of the form allows anything to be put in.

if the person wnats this how do i put it in the database:

hello, 'how are you', "I'm Fine."


thanx

 

[Ablecken]

Anybody have any ideas about this?

 

[link9]

Your resulting SQL must look like this:

INSERT INTO test (test) values ('hello, ''how are you'', "I''m Fine."')

and so the input from the user must have modifications run on it using the replace() function.

Basically, you just need to replace any single tick with two single ticks. Try this:

theText = request.form("theText&quot
theText = replace(theText,"'","''&quot

sql = "INSERT INTO test (test) values ('" & theText & "')"

Should get you going.


paul