Database: SQL 2005/MS ACCESS/Pervasive SQL
Using: ADO.net

let's say i have a sql statement like this:

Select MyFirstName,MyLastName from MyFullName where MyFirstName='Richard'
(when i run it, its perfectly fine)

how about running it like this?

Select MyFirstName,MyLastName from MyFullName where MyFirstName='R'ich'a"r"d"s'

using chr(34) or chr(96) is not an option.

currently im using parameters to avoid this...but i would want to do it as sql syntax without any parameters. any suggestion?






____________________________
Error 404 ...File not found...!!!!

you should remove these special chars before creating the sql statement, is it a user input that you want to use as filter? if so use replace function to remove (') and (") and replave them with an empty string before generating the sql statement string

____________________________
AndreaVB

quote:

---

admin wrote:
you should remove these special chars before creating the sql statement, is it a user input that you want to use as filter? if so use replace function to remove (') and (") and replave them with an empty string before generating the sql statement string

---