Escaping in VBScript

[bobbyballgame]

I am having a problem calling Stored Procedures:

....
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue & """",
Conn
' I have also tried the "'" & MyValue & "'" format as well
....

the problem appears to be related to the single quote, as ones without
quotes seemed to work. Is there escaping and is their URI escaping?

Thanks,BB

[Ray at]

http://www.aspfaq.com/2035

Ray at work

"bobbyballg ame" <so*****@micros oft.com> wrote in message
news:ei******** ********@tk2msf tngp13.phx.gbl. ..

I am having a problem calling Stored Procedures:

...
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue & """", Conn
' I have also tried the "'" & MyValue & "'" format as well
...

the problem appears to be related to the single quote, as ones without
quotes seemed to work. Is there escaping and is their URI escaping?

Thanks,BB

[Bob Barrows]

You can avoid all these delimiter-and-escaping headaches by using this
method to call your procedure:

Conn.MyStoredPr oc MyValue,MyOther Value

HTH,
Bob Barrows
PS. Do not use this technique if you are planning to run this page via
dotnet.

bobbyballgame wrote:

I am having a problem calling Stored Procedures:

...
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue &
"""", Conn
' I have also tried the "'" & MyValue & "'" format as well
...

the problem appears to be related to the single quote, as ones without
quotes seemed to work. Is there escaping and is their URI escaping?

Thanks,BB

[Cowboy \(Gregory A. Beamer\)]

All ' become '' (two single quotes)

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & ConvertSingleQu otes(MyValue) & """, """ &
ConvertSingleQu otes(MyOtherVal ue) & """",
Conn
' I have also tried the "'" & MyValue & "'" format as well
Function ConvertSingleQu otes(InputVal)
ConvertSingleQu otes = Replace(InputVa l,"'","''")
End Function
--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
Author: ADO.NET and XML: ASP.NET on the Edge

*************** *************** *************** *************** *************** *
****
Think Outside the Box!
*************** *************** *************** *************** *************** *
****
"bobbyballg ame" <so*****@micros oft.com> wrote in message
news:ei******** ********@tk2msf tngp13.phx.gbl. ..

I am having a problem calling Stored Procedures:

...
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue & """", Conn
' I have also tried the "'" & MyValue & "'" format as well
...

the problem appears to be related to the single quote, as ones without
quotes seemed to work. Is there escaping and is their URI escaping?

Thanks,BB

[bobbyballgame]

Bob,
Thanks, I would like to avoid delimiter, escaping, encoding, charsets -->
whatever I can. However, using your method it is not clear how you would get
the resultSet. Is there a way?

Thanks,
BB

"Bob Barrows" <re*******@yaho o.com> wrote in message
news:u%******** ********@TK2MSF TNGP12.phx.gbl. ..

You can avoid all these delimiter-and-escaping headaches by using this
method to call your procedure:

Conn.MyStoredPr oc MyValue,MyOther Value

HTH,
Bob Barrows
PS. Do not use this technique if you are planning to run this page via
dotnet.

bobbyballgame wrote:

I am having a problem calling Stored Procedures:

...
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue &
"""", Conn
' I have also tried the "'" & MyValue & "'" format as well
...

the problem appears to be related to the single quote, as ones without
quotes seemed to work. Is there escaping and is their URI escaping?

Thanks,BB

[Bob Barrows]

I'm sorry. i showed you how to execute a non-records-returning procedure. Te
execute a procedure that returns records, first instantiate a recordset
object:
set rs=server.creat eobject("adodb. recordset")

then use the recordset variable as the last argument in the procedure call:
Conn.MyStoredPr oc MyValue,MyOther Value, rs

HTH,
Bob Barrows

bobbyballgame wrote:

Bob,
Thanks, I would like to avoid delimiter, escaping, encoding, charsets
--> whatever I can. However, using your method it is not clear how
you would get the resultSet. Is there a way?

Thanks,
BB

"Bob Barrows" <re*******@yaho o.com> wrote in message
news:u%******** ********@TK2MSF TNGP12.phx.gbl. ..

You can avoid all these delimiter-and-escaping headaches by using
this method to call your procedure:

Conn.MyStoredPr oc MyValue,MyOther Value

HTH,
Bob Barrows
PS. Do not use this technique if you are planning to run this page
via dotnet.

bobbyballgame wrote:

I am having a problem calling Stored Procedures:

...
dim MyValue, MyOtherValue

MyValue = "Bobby's value"
MyOtherValue = Bobby's other value"

rs.Open "exec MyStoredProc """ & MyValue & """, """ & MyOtherValue
& """", Conn
' I have also tried the "'" & MyValue & "'" format as well
...

the problem appears to be related to the single quote, as ones
without quotes seemed to work. Is there escaping and is their URI
escaping?

Thanks,BB