0
Hi
when you are use the single quite you need add extra two quote to string.or else is make to sql injection.
About this please take look,
http://archives.devshed.com/forums/windows-107/sql-injecttion-401471.html
thank you
0
Hi you just need to Replace every Single timeWriten Quote to Double Time
suppose you are inserting
string " pankaj's Name "
then you should write String Like
"Pankaj' 's name " { Dobule time Single Quotes before 's' )
Thats it :)
Better to Write Function That Will Replace Every Single Time Quote to Write it Double time in String
public string CSQ(string str)
{
return Strings.Replace(str, "'", "''");
}
if i Helps you please check "Do you like this answer"