Stored Procedure Call - Comments with Single Quote

[Civic06]

I have a multiline textbox on my webpage. I make a stored procedure call to save the textbox value to a database. If I enter in for example "test'ing" with single quote, the app errors. How to handle this? Is there an escape sequence for this?

[Karthik A]

You need to escape such strings, so replace ' with ''. That is 'test'ing' becomes 'test''ing'.

Cheers, Karthik

[Blue_Boy]

Use SqlParameters. Check this http://www.codeproject.com/KB/database/NET\_Data\_Access.aspx

---

I Love T-SQL "Don't torture yourself,let the life to do it for you." If my post helps you kindly save my time by voting my post. www.aktualiteti.com