Clean Quotes From SQL Parameters With Replace

If you’ve ever used SQL commands against the ADO Connection object, you might have had a problem allowing the user to enter text that contains an apostrophe:

 ADOCon.Execute "Insert Into Emp(Name) Select '" _	& txtName.Text & "'"

This works fine if the name is Smith, but fails if the name is O’Connor. You can easily solve this problem with VB6’s Replace function. Use the Replace function to parse the string and replace the single apostrophe with two apostrophes (not double quotes):

 ADOCon.Execute _	"Insert Into Emp(Name) Select '" _	& Replace(txtName.Text, "'", "''") & "'"
Share the Post:
Share on facebook
Share on twitter
Share on linkedin


Recent Articles: