How do I: Replace single quotes in my sql statemnet?

Question

Hello:
 
I have a sql command to execute but some times there is a single quote in the textBox and it messes me up. How can I allow to save the single quote to the sql table?
 

Answer 1

.NET:   
   string userString = textBox1.Text;
   string replacedString = userString.Replace("'", "''");
 
SQL:
   replacedString = Replace(userString,"'","''")
 
Hope this helps.

Answer 2

Hi Giorgio,
    Whenever you have single quotes, replace them with 2 single quotes. That should work.

Answer 3

Nainil:
 
Yes, thank you.

Answer 4

Nainil:
 
Can you give me a sample code of the 2 types?
 

Answer 5

Giorgio,
   You can either use .NET string.Replace() method to replace any single quotes with 2 single qoutes or you can use T-SQL's Replace function. Since the value being inserted is passed in as a SqlParameter.Value property, you can run the Replace function through it and ensure that any string being passed to the stored procedure is clean. Hope this helps.

Answer 6

Nainil:
 
Yes, if it was a string. But it will be some text that the user entered. Is there a way to do it automatically when I put it into the sql command to save it?