problems with strings and " in asp: how to use the the quotation mark correctly?

[Bart Plessers \(artabel\)]

Hello,
I have problems with the quotation mark and strings in my asp script.

I made a general FORM (myform.asp) to read out data from a dbase

Some vars are defined in the FORM:
SQL_DBASE
SQL_SELECT
SQL_TABLE
SQL_CONDITION

In the script, this information is glued together as a SQL expression:
SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"
and a table is generated from this SQL statement

However,
I want to call this form also with an external link and pars some
parameters,
example:
<a href="myform.asp?var01=string01">Mylink</a>

When this link is activated, the form myform.asp is called with querystring
var01=string01
and SQL_CONDITION becomes:
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"
However
The SQL_CONDITION shows NOT up correctly in my form, it becomes
MyField =

in stead of
MyField = "string01"
The problem is that the '-character is not converted to a "-character
anybody?

any help is appreciated

bartp

--
HyperART
Paul Van Ostaijenlaan 4
3001 Heverlee

[Ray at]

Does this line:
SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"

come before this line?
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"

And what does this yield?
Response.Write Request.Querystring("var01")

And what do you mean about ' being converted to "?

Ray at work
"Bart Plessers (artabel)" <ba**********@hotmail.com> wrote in message
news:%2****************@TK2MSFTNGP10.phx.gbl...

Hello,
I have problems with the quotation mark and strings in my asp script.

I made a general FORM (myform.asp) to read out data from a dbase

Some vars are defined in the FORM:
SQL_DBASE
SQL_SELECT
SQL_TABLE
SQL_CONDITION

In the script, this information is glued together as a SQL expression:
SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"
and a table is generated from this SQL statement

However,
I want to call this form also with an external link and pars some
parameters,
example:
<a href="myform.asp?var01=string01">Mylink</a>

When this link is activated, the form myform.asp is called with querystring var01=string01
and SQL_CONDITION becomes:
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"
However
The SQL_CONDITION shows NOT up correctly in my form, it becomes
MyField =

in stead of
MyField = "string01"
The problem is that the '-character is not converted to a "-character
anybody?

any help is appreciated

bartp

--
HyperART
Paul Van Ostaijenlaan 4
3001 Heverlee

[Phillip Windell]

Use the single Quote in all HTML Values and in the SQL Statement and
you will have a lot less trouble.

Also HTML Values don't need any quotes at all if they are single words
without and spaces, although I still always use single quotes anyway.
--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

"Bart Plessers (artabel)" <ba**********@hotmail.com> wrote in message
news:#D**************@TK2MSFTNGP10.phx.gbl...

Hello,
I have problems with the quotation mark and strings in my asp script.
I made a general FORM (myform.asp) to read out data from a dbase

Some vars are defined in the FORM:
SQL_DBASE
SQL_SELECT
SQL_TABLE
SQL_CONDITION

In the script, this information is glued together as a SQL expression: SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"
and a table is generated from this SQL statement

However,
I want to call this form also with an external link and pars some
parameters,
example:
<a href="myform.asp?var01=string01">Mylink</a>

When this link is activated, the form myform.asp is called with querystring var01=string01
and SQL_CONDITION becomes:
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"
However
The SQL_CONDITION shows NOT up correctly in my form, it becomes
MyField =

in stead of
MyField = "string01"
The problem is that the '-character is not converted to a "-character

anybody?

any help is appreciated

bartp

--
HyperART
Paul Van Ostaijenlaan 4
3001 Heverlee

[Adrienne]

Gazing into my crystal ball I observed "Phillip Windell" <pwindell{at}
wandtv*d0t*com> writing in news:uE**************@TK2MSFTNGP10.phx.gbl:

Also HTML Values don't need any quotes at all if they are single words
without and spaces, although I still always use single quotes anyway.

HTML attributes need quotes if they are character values. XHTML requires
ALL attributes be quoted.

--
Adrienne Boswell
Please respond to the group so others can share
http://www.arbpen.com

[bart plessers]

found the solution:

SQL_CONDITION = "Gallery = " & chr(34) & Request.QueryString("Gallery") &
chr(34)

with the chr(34) the problems were all solved.

When I used ', I had some problems running the query

Anyway, thanx for your time!

bartp

--

==========================================
Hyper A.R.T.
bart plessers
Paul Van Ostaijenlaan 4
3001 Heverlee
BELGIUM
tel: [phone]
fax: [phone]
==========================================

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in message
news:#j*************@TK2MSFTNGP12.phx.gbl...

Does this line:
SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"

come before this line?
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"

And what does this yield?
Response.Write Request.Querystring("var01")

And what do you mean about ' being converted to "?

Ray at work
"Bart Plessers (artabel)" <ba**********@hotmail.com> wrote in message
news:%2****************@TK2MSFTNGP10.phx.gbl...

Hello,
I have problems with the quotation mark and strings in my asp script.

I made a general FORM (myform.asp) to read out data from a dbase

Some vars are defined in the FORM:
SQL_DBASE
SQL_SELECT
SQL_TABLE
SQL_CONDITION

In the script, this information is glued together as a SQL expression:
SQL = "SELECT " & SQL_SELECT & " FROM " & SQL_TABLE & " WHERE " &
SQL_CONDITION & " ;"
and a table is generated from this SQL statement

However,
I want to call this form also with an external link and pars some
parameters,
example:
<a href="myform.asp?var01=string01">Mylink</a>

When this link is activated, the form myform.asp is called with

querystring

var01=string01
and SQL_CONDITION becomes:
SQL_CONDITION = "MyField = '" & Request.QueryString("var01") & "'"
However
The SQL_CONDITION shows NOT up correctly in my form, it becomes
MyField =

in stead of
MyField = "string01"
The problem is that the '-character is not converted to a "-character
anybody?

any help is appreciated

bartp

--
HyperART
Paul Van Ostaijenlaan 4
3001 Heverlee

[Phillip Windell]

I had to go verify it without "official webmaster", our resident
in-house HTML expert....she says that although most people still use
the quotes, words do not require quotes if they consist of only one
word with no spaces:

value = phil <-- is fine
value = phil windell <-- will not work
value = 'phil windell' or value = "phil windell" <-- is fine
Although most people still include quotes as either a standard
practice or just habit.
--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

"Adrienne" <ar****@sbcglobal.net> wrote in message
news:Xn***************************@207.115.63.158. ..

HTML attributes need quotes if they are character values. XHTML requires ALL attributes be quoted.

--
Adrienne Boswell
Please respond to the group so others can share
http://www.arbpen.com

[Phillip Windell]

"Phillip Windell" <pwindell{at}wandtv*d0t*com> wrote in message
news:O$**************@TK2MSFTNGP12.phx.gbl...

I had to go verify it without "official webmaster", our resident

Stinking "typos"! should say, "...verify it with *our*...."

[Adrienne]

Gazing into my crystal ball I observed "Phillip Windell" <pwindell{at}
wandtv*d0t*com> writing in news:uU*************@TK2MSFTNGP10.phx.gbl:

"Phillip Windell" <pwindell{at}wandtv*d0t*com> wrote in message
news:O$**************@TK2MSFTNGP12.phx.gbl...

I had to go verify it without "official webmaster", our resident

Stinking "typos"! should say, "...verify it with *our*...."

Well, hopefully your "official webmaster" is aware that XHTML does require
all attributes to be quoted.

See http://www.w3.org/TR/xhtml1/diffs.html#h-4.4

--
Adrienne Boswell
Please respond to the group so others can share
http://www.arbpen.com

[Phillip Windell]

I don't know, I assume she does...we don't use any XHTML or XML.
--

Phillip Windell [CCNA, MVP, MCP]
pw******@wandtv.com
WAND-TV (ABC Affiliate)
www.wandtv.com

"Adrienne" <ar****@sbcglobal.net> wrote in message
news:Xn****************************@207.115.63.158 ...

Well, hopefully your "official webmaster" is aware that XHTML does require all attributes to be quoted.

See http://www.w3.org/TR/xhtml1/diffs.html#h-4.4