Single quote(') cause SQL statement problem in text input form.

[royyan]

I am trying to create a form to update news. The form I created are working. The only problem is if I try to put a block of text which include a single quote into the form, there will be a SQL statement error. Any expert can tell me how I can deal with this issue.
I am using Microsoft access as database. Thanks!

 

[link9]

dim theValue
theValue = request.form("theValue&quot
theValue = replace(theValue,"'","''&quot

So that any single ticks are replaced w/ two single ticks. Should clear it right up for you.


paul

 

[BobLoblaws]

If I remember correctly you must use 2 quotes.
example. "INSERT INTO table (row1) VALUES ('It''s cold today')

 

[lobstah]

use:

Replace(Request.Form("field&quot, "'", "''&quot

replaces the single 's with double ''s

to further clean up your input data, can even add Trim:

Trim(Replace(Request.Form("field&quot, "'", "''&quot)

which will remove any leading spaces.....