Escaping quotes in .NET for MSSQL

[zottty]

Dear Friends,

I just can't find the solution for escaping strings for MSSQL. I guess it is a usual problem. I want to escape a string in a C# application, what should I change?

string anything = "xx ' xx \" xx";
DB.Query("INSERT INTO something VALUES('" + anything + "')");
 

Thanks for your help.

Zoltan

[SammyB]

Dear Friends,

I just can't find the solution for escaping strings for MSSQL. I guess it is a usual problem. I want to escape a string in a C# application, what should I change?

string anything = "xx ' xx \" xx";
DB.Query("INSERT INTO something VALUES('" + anything + "')");
 

Thanks for your help.

Zoltan

There are two challenges here:

1. Have C# ignore the backslash -- just put an @ before the double quotes
2. Have C# put a double quote in a string -- just use two double quotes.

So, it looks like

string anything = @"xx ' xx \"" xx";
 

[zottty]

There are two challenges here:

1. Have C# ignore the backslash -- just put an @ before the double quotes
2. Have C# put a double quote in a string -- just use two double quotes.

So, it looks like

string anything = @"xx ' xx \"" xx";
 

Sammy, super thanks! I will get along with this, enjoy your day!
Zoltan