probleum in select statement

[veer]

Hi
this is a silly question but it is wasting of lot of my time actually i want to search a string in mdb file using select statement
the string is

CmpnyName ="killeen women's health center"
and select statement is

 sOldQuery = "select CMPNYNM from " & txtOldTableName.Text & " where CMPNYNM = '" & NewCmpnyName & "'"

it produces the error due to " ' " sign in women's word and when i use

 
sOldQuery = "select CMPNYNM from " & txtOldTableName.Text & " where CMPNYNM = '" & Replace(NewCmpnyName, "'", "") & "'"
 

it works fine what could not find any string from mdb table because the CMPNYNM in mdb table is like "killeen women's health center"


how is it possible so that this kind of strings are searched using select query
please reply as soon as possible
thanks in advance
varinder

[senol]

good

 
<asp:DropDownList ID="drpListIl" runat="server" Width="268px" DataTextField="il" DataValueField="il" AutoPostBack="True" OnSelectedIndexChanged="drpListIl_SelectedIndexChanged"> </asp:DropDownList>
 
protected void drpListIl_SelectedIndexChanged(object sender, EventArgs e)
{
drpListIlce.DataSource = baglantitable.DV_Sonuc("SELECT * from tbl_ilceler where yol='" + drpListIl.SelectedValue + "' ");
//grupuc.DataTextField = "kategori_isim";
//grupuc.DataValueField = "kategori_id";
drpListIlce.DataBind();
}
 

ok??

[DrBunchman]

Hi varinder,

Instead of replacing the single quotes with a blank use two single quotes as these will be interpreted by your database engine as a single quote. Like so:

 
sOldQuery = "select CMPNYNM from " & txtOldTableName.Text & " where CMPNYNM = '" & Replace(NewCmpnyName, "'", "''") & "'"
 

Hope this helps,

Dr B

[veer]

thanks very much
it works fine
i need another answer
i am using vs.net 2008 when i made a program and then want to make setup of that program and when i finish the setup the program shortcut icon does't show in start->Program
i have to do it manully can you tell me why it is behaving like this

Hi varinder,

Instead of replacing the single quotes with a blank use two single quotes as these will be interpreted by your database engine as a single quote. Like so:

 
sOldQuery = "select CMPNYNM from " & txtOldTableName.Text & " where CMPNYNM = '" & Replace(NewCmpnyName, "'", "''") & "'"
 

Hope this helps,

Dr B