SQL Escape in C# 2

[kurie]

Can anyone please help with a function that will accept a string as a parameter and will replace all occurrences of the “’” (apostrophe\single quote) character with the valid SQL equivalent i.e. escape the single quote to be used in a SQL statement. And then return the correctly formatted string.

Regards

 

[jmeckley]

use parameterized queries instead of sql injection.

Jason Meckley
Programmer

faq855-7190
faq732-7259

 

[Qik3Coder]

What jmeckley said...

myString = myString.Replace("[!]'[/!]", "[!]''[/!]")

Lodlaiden

You've got questions and source code. We want both!