User Parameterized queries and stop assuming that the user is feeding your application the correct data. Look at this Introduction to SQL Injection [^] Hope it Helps Vuyiswa Maseko, Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers." C#/VB.NET/ASP.NET/SQL7/2000/2005/2008 http://www.vuyiswamaseko.tiyaneProperties.co.za vuyiswa@its.co.za http://www.itsabacus.co.za/itsabacus/

None taken, yes and \n is the first thing I tried actually, no I am definately not a beginner at this but sometimes one has to look at the basics which can become more difficult the more experienced one becomes. Thanks for your thoughts on this, I am going to persue another solution.