How to insert a string variable with " ' "(single qoutation) into database(sql server 2005

[Nekkantidivya]

Hi, I need to insert a string variable with '(single quotations)into the sql server 2005 database. I tried to insert it in the normal method. But I am getting an error while inserting it. For example string str="Hi 'Please help me' programers"; SqlCommand cmd1 = new SqlCommand("INSERT into Table1(Message) values('"+str+"')",con); I have to insert the exact string without any modifications into the database. Please if anyone know solution please help me. Thank you.

[Gaurav K Singh]

Use double single quote in place of one single quote

The miracle is this--the more we share, the more we have.

[sumit7034]

Try this SqlCommand sqlCmd = new SqlCommand("INSERT into Table1(Message) values @str ", dbConn); sqlCmd.Parameters.AddWithValue("@str", str);

[Member 1021252]

you can use some other symbol and replace it at time of rendering the value for that. For example before inserting replace with say # and while rendering change it back to ' Hope this helps Puneet

[Abhishek Sur]

I think sumit's answer is the best one... using SqlParameters will remove the possibility of sql injection as well.:rose:

Abhishek Sur My Latest Articles Basics on LINQ and Lambda Expressions
Create .NET Templates