string problems

[Jerry]

Hi,

I am not sure if this the correct group to ask or not, but here it goes. I
am having problems inserting data into MS SQL 2005 vai c#.

I have strings( varchar( 80 )), that have ' and " in them:

'Danny's Place'

' 1' 1/2" '

How do I get SQL in c# to take varchar with ' & " ?

I have found issues in creating column names with / & % as well. Any ideas?

Thanks,

Jerry

 

[Michael Nemtsev]

Hello jerry,

j> I am not sure if this the correct group to ask or not, but here it
j> goes. I am having problems inserting data into MS SQL 2005 vai c#.
j>
j> I have strings( varchar( 80 )), that have ' and " in them:
j>
j> 'Danny's Place'
j>
j> ' 1' 1/2" '
j>
j> How do I get SQL in c# to take varchar with ' & " ?

use the second ' sign

---
WBR, Michael Nemtsev [C# MVP].
My blog: http://spaces.live.com/laflour
Team blog: http://devkids.blogspot.com/

"The greatest danger for most of us is not that our aim is too high and we
miss it, but that it is too low and we reach it" (c) Michelangel

 

[Jerry]

Michael,

Hello jerry,

j> I am not sure if this the correct group to ask or not, but here it
j> goes. I am having problems inserting data into MS SQL 2005 vai c#.
j> j> I have strings( varchar( 80 )), that have ' and " in them:
j> j> 'Danny's Place'
j> j> ' 1' 1/2" '
j> j> How do I get SQL in c# to take varchar with ' & " ?

use the second ' sign

I do not understand, can you give me some examples?

Thank,

Jerry

---
WBR, Michael Nemtsev [C# MVP]. My blog: http://spaces.live.com/laflour
Team blog: http://devkids.blogspot.com/

"The greatest danger for most of us is not that our aim is too high and we
miss it, but that it is too low and we reach it" (c) Michelangelo

 

[Ignacio Machin \( .NET/ C# MVP \)]

Hi,

Use parameters, it will solve your problem as well as prevent SQL Injections
attacks.

 

[Michael Nemtsev]

Hello jerry,
j> I do not understand, can you give me some examples?
j>

http://www.kamath.com/codelibrary/cl003_apostrophe.asp

But as Ignacio already told u, the params is the best way (depending on what
are u doing)

---
WBR, Michael Nemtsev [C# MVP].
My blog: http://spaces.live.com/laflour
Team blog: http://devkids.blogspot.com/

"The greatest danger for most of us is not that our aim is too high and we
miss it, but that it is too low and we reach it" (c) Michelangel

 

[Guest]

Amen!
The standard T-SQL escape character for a single quote is to put two single
quotes together , e.g. ('').
This tells SQL server to treat the second one as a literal part of the
string, instead of thinking it is the end marker for the string.
Ignacio is so right. Use parameters!

Peter
--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net