Replace quotations in SQL Access Query/Insert Statement 1

[Godfrey]

Hi,

I need a function that will properly quote for insertion an SQL (for Access DB) statement. I currently have one that works for a single Apostrophe:

Public Function ApostropheCheck(ByVal strIn As String)

ApostropheCheck = Replace(strIn, "'", "''")
Exit Function

End Function

Can you help me with one that will do exactly the same as above except instead of replacing ' --it will replace all " ?

Thank you!

 

[gmmastros]

Public Function QuoteCheck(ByVal strIn As String)

QuoteCheck = Replace(strIn, """", """""")
Exit Function

End Function

-George

Strong and bitter words indicate a weak cause. - Fortune cookie wisdom

 

[chiph]

You generally don't want to do this, as it leaves you open to a SQLInjection attack (google the term for some shocking info). Instead, you should use ADO parameter objects.

Chip H.


____________________________________________________________________
Donate to Katrina relief:

http://s1.amazon.com/paypage/PELYGQVJ8Q7IB/103-6821258-5919825

If you want to get the best response to a question, please read FAQ222-2244 first