String parameters with single or double quotes

[jwaldner]

wondering how to deal with String parameters that may have single or double quotes in them. I think they are breaking my report. I am using a command to run a query.

 

[crystalkiwibruce]

To enter a quote in a string, put two of them there...

"""" will appear as a string as a single

 

[jwaldner]

I do not have control over what the parameter data contains, the user enters a string [to search for ] as a parameter. if that string has a ' or " the report breaks. so i need a way to scrub the data before the query is run in the command.

I have tried this, but it did not work:

SET @SUBJECT = Replace(@SUBJECT, '''', '''''')

...rest of query...