writing quotes to database

[Netfreaky]

When you type a quote in a name for example, the database is returning
an error...
Now i only check the name field and replace every quote to \'

Is there a simple thing to replace all special characters with
something that can be inserted into a database?

I'm using asp.net with VB, and a MySQL database (using SQL server also
gives errors)

--
Greetz, Netfreaky
http://www.netfreaky.be

[Steve C. Orr [MVP, MCSD]]

You should use ADO.NET parameter objects. They will solve this problem and
similar problems and protect you against SQL Injection Attacks.
Here's more info:
http://msdn.microsoft.com/library/de...classtopic.asp
us/dv_vbcode/html/vbtskcodecallingparameterizedstoredprocedurevisual basic.as
p

--
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
Hire top-notch developers at http://www.able-consulting.com
"Netfreaky" <us*****************@pandora.belgium.invalid> wrote in message
news:Xn***********************@195.130.132.70...

When you type a quote in a name for example, the database is returning
an error...
Now i only check the name field and replace every quote to \'

Is there a simple thing to replace all special characters with
something that can be inserted into a database?

I'm using asp.net with VB, and a MySQL database (using SQL server also
gives errors)

--
Greetz, Netfreaky
http://www.netfreaky.be

[Curt_C [MVP]]

replace it with '' (that's two single quotes) not \'
--
Curt Christianson
Owner/Lead Developer, DF-Software
Site: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"Netfreaky" <us*****************@pandora.belgium.invalid> wrote in message
news:Xn***********************@195.130.132.70...

When you type a quote in a name for example, the database is returning
an error...
Now i only check the name field and replace every quote to \'

Is there a simple thing to replace all special characters with
something that can be inserted into a database?

I'm using asp.net with VB, and a MySQL database (using SQL server also
gives errors)

--
Greetz, Netfreaky
http://www.netfreaky.be

[Kikoz]

Use parameters, man :)
"Netfreaky" <us*****************@pandora.belgium.invalid> wrote in message
news:Xn***********************@195.130.132.70...

When you type a quote in a name for example, the database is returning
an error...
Now i only check the name field and replace every quote to \'

Is there a simple thing to replace all special characters with
something that can be inserted into a database?

I'm using asp.net with VB, and a MySQL database (using SQL server also
gives errors)

--
Greetz, Netfreaky
http://www.netfreaky.be