devxlogo

Clean Quotes From SQL Parameters With Replace

Why Trust Us

If you’ve ever used SQL commands against the ADO Connection object, you might have had a problem allowing the user to enter text that contains an apostrophe:

 ADOCon.Execute "Insert Into Emp(Name) Select '" _	& txtName.Text & "'"

This works fine if the name is Smith, but fails if the name is O’Connor. You can easily solve this problem with VB6’s Replace function. Use the Replace function to parse the string and replace the single apostrophe with two apostrophes (not double quotes):

 ADOCon.Execute _	"Insert Into Emp(Name) Select '" _	& Replace(txtName.Text, "'", "''") & "'"

Charlie has over a decade of experience in website administration and technology management. As the site admin, he oversees all technical aspects of running a high-traffic online platform, ensuring optimal performance, security, and user experience.

See also  Five Early Architecture Decisions That Quietly Get Expensive
Disclosure

About Our Editorial Process

At DevX, we’re dedicated to tech entrepreneurship. Our team closely follows industry shifts, new products, AI breakthroughs, technology trends, and funding announcements. Articles undergo thorough editing to ensure accuracy and clarity, reflecting DevX’s style and supporting entrepreneurs in the tech sphere.

See our full editorial policy.

Show More