Beware of Single Quotes When Working With SQL

Beware of Single Quotes When Working With SQL

When concatenating a SQL statement such as INSERT, you may have trouble if your field value contains an apostrophe (‘) such as in “Commedia Dell’Arte.” SQL thinks the apostrophe is a delimiter for the string. You can avoid the problem by using the VBScript Replace() function to clean up the string. For example, this code replaces all single apostrophes with two apostrophes:

 sText="Commedia Dell'Arte"sText = Replace(sText, "'", "''")

Then use sText to concatentate your SQL statement, instead of the single apostrophe version.

See also  5 Tips for Choosing the Right Medical Software for Your Practice

About Our Editorial Process

At DevX, we’re dedicated to tech entrepreneurship. Our team closely follows industry shifts, new products, AI breakthroughs, technology trends, and funding announcements. Articles undergo thorough editing to ensure accuracy and clarity, reflecting DevX’s style and supporting entrepreneurs in the tech sphere.

See our full editorial policy.

About Our Journalist