Clean Quotes From SQL Parameters With Replace

Clean Quotes From SQL Parameters With Replace

If you’ve ever used SQL commands against the ADO Connection object, you might have had a problem allowing the user to enter text that contains an apostrophe:

 ADOCon.Execute "Insert Into Emp(Name) Select '" _	& txtName.Text & "'"

This works fine if the name is Smith, but fails if the name is O’Connor. You can easily solve this problem with VB6’s Replace function. Use the Replace function to parse the string and replace the single apostrophe with two apostrophes (not double quotes):

 ADOCon.Execute _	"Insert Into Emp(Name) Select '" _	& Replace(txtName.Text, "'", "''") & "'"
See also  Why ChatGPT Is So Important Today

About Our Editorial Process

At DevX, we’re dedicated to tech entrepreneurship. Our team closely follows industry shifts, new products, AI breakthroughs, technology trends, and funding announcements. Articles undergo thorough editing to ensure accuracy and clarity, reflecting DevX’s style and supporting entrepreneurs in the tech sphere.

See our full editorial policy.

About Our Journalist