ignore single qoutes while inputing

[mimranp]

hi all
i want to escape starting ('' )at the start of string
i want to just replace the string

<%@ WebHandler Language="C#" Class="Type_BLC"  %>
 
using System;
using System.Web;
using System.Data;
using System.Data.OracleClient;
using System.Web.SessionState;
using System.Text;
using System.Text.RegularExpressions;
 
 
 
    public class Type_BLC : IHttpHandler ,IRequiresSessionState 
    {
        DataAccess oraDA =new DataAccess ();
 
        public void ProcessRequest(HttpContext context)
        {
 
           // string Is_ID = context.Request.QueryString["catType"];
            string Is_DESC = context.Request.QueryString["CAT_DESC"];
            Is_DESC = Is_DESC.Replace("'", "''");                                          
            string Is_Index = context.Request.QueryString["CAT_INDEX"];
            string Is_singleton = context.Request.QueryString["singleton"];
            string Is_cardinality=context .Request .QueryString ["cardinality"];
            string Is_node = context.Request.QueryString["IS_NODE"];
            string validat = "^[YyNn]$";
            string valIndex = "([a-z]|[A-Z]|[0-9]{4})";
            //string valDesc = @"""[^""\\\r\n]*(?:\\.[^""\\\r\n]*)*";
            string validateCardinality = "([00]|[01]|[10]|[1n]{1})";
            //to validate the string
            //string valDesc =@"""([^""\\]|\\['""\\0abfnrtv]|\\x[a-fA-F0-9][a-fA-F0-9]{0,3})*""";
            //string valDesc = @"""([^""\\]|\\['""\\]|[a-zA-Z]|[0-9])""";
            //string valDesc = "([a-zA-Z0-9]{?})";
           // string valDesc = @"(?<q>[""'].*?\k<q>|w+)";
            string Is_msg2 = "String is not in proper format";
            //string Is_msg = "Only Y or N";
            string Is_msg4 = "Only Characters";
            string Is_msg1 = "Only 00 or 01 or 10 or 1n";
            //if (Regex.IsMatch(Is_singleton, validat) )               
 
            //    context.Response.Redirect("Type_INC.aspx?msg=" + Is_msg);
            //if (!(Regex.IsMatch(Is_DESC, valDesc)))
            //context.Response.Redirect("Type_INC.aspx?msg2=" + Is_msg2);
           if (!(Regex.IsMatch(Is_node, validat)))
                context.Response.Redirect("Type_INC.aspx?msg=" + Is_msg2);
            if (!(Regex.IsMatch(Is_cardinality, validateCardinality)))
                context.Response.Redirect("Type_INC.aspx?msg1=" + Is_msg1);
            if (!(Regex.IsMatch(Is_Index , valIndex )))
                context.Response.Redirect("Type_INC.aspx?msg4=" + Is_msg4);
            //if (!(Regex.IsMatch(Is_DESC, valDesc)))
            //    context.Response.Redirect("Type_INC.aspx?msg2=" + Is_msg2);
 
            //Regex customExp = new Regex(validat);
            //Match m = customExp .Match (Is_singlton  );
            //if (!(m.Success ))
            //{
            //    context.Response.Redirect("Type_INC.aspx?msg="+Is_msg2);
            //}
 
            //if (Is_node != customExp)
            //    context.Response.Redirect("Type_INC.aspx?msg="+Is_msg2);
 
 
            //context.Response.ContentType = "text/plain";
            //context.Response.Write("Hello World");
            bool bFlag = false;
            if (insert_Record( Is_DESC, Is_Index,Is_singleton,Is_cardinality ,Is_node))
            {
                bFlag = true;
            }
            if(bFlag )
            {
 
                context.Response.Redirect("/Admin/Common/Info_MS.aspx?msg='Sucessfully Added Category Type'&LINKID=3" );
                //context.IsPostNotification = Is_msg;
 
            }
            context.Response.Redirect("/Admin/Common/Err_MS.aspx?msg=" +oraDA.getError().Replace("\n", ""));
 
        }
 
        public bool IsReusable
        {
            get
            {
                return false;
            }
 
        }
        //public bool InsertType(CategoryType cat)
        //{
        //    string oraStr = "Data Source=TESTORA;User ID=project01_user;Password=project01_user";
        //    string Insert = "INSERT INTO TX_TYPE (TX_TYPE,TX_DESC)VALUES (&TX_TYPE,&TX_DESC)";
        //    OracleConnection oraConn = new OracleConnection(oraStr);
        //    OracleCommand oraCmd = new OracleCommand(Insert, oraConn);
        //    oraCmd.CommandType = CommandType.Text;
        //    try
        //    {
        //        oraCmd.Parameters.Add(new OracleParameter("&TX_TYPE", cat.CatType));
        //        oraCmd.Parameters.Add(new OracleParameter("&TX_DESC", cat.CatDescription));
        //        oraConn.Open();
        //        {
        //            int oraRow = oraCmd.ExecuteNonQuery();
        //            if (oraRow > 0)
        //                return true;
        //        }
 
        //    }
        //    catch (Exception)
        //    {
 
        //        return false;
        //    }
        //    finally
        //    {
        //        if (oraConn.State == ConnectionState.Open)
        //            oraConn.Close();
        //    }
 
 
        //    return false;
        //}
 
       public  bool insert_Record( string Is_DESC,string Is_Index,string Is_singlton,string Is_cardinality,string Is_node)
            {  
 
        bool bFlag = false;
 
 
        oraDA.setConnectionString();
        //oraDA.setConnectionString("Data Source=TESTORA;User ID=project01_user;Password=project01_user;");
 
        if (oraDA.connect2DB())
        {
 
            //template code on how to insert or update data using transaction object
            //always use this method for insert, update and delete.
            //string[] sqlArr = new string[2];
            string[] sqlArr = new string[1];
            //sqlArr[0] = "INSERT INTO TX_TYPE (CAT_TYPE,CAT_DESC) VALUES ('95','dummy')";
            //sqlArr[1] = "INSERT INTO TX_TYPE (CAT_TYPE,CAT_DESC) VALUES ('96','dummy')";
 
            sqlArr[0] = "insert into TX_TYPE (CAT_TYPE,CAT_DESC,CAT_INDEX,SINGLETON, CARDINALITY, IS_NODE) VALUES((select NVL(MAX(CAT_TYPE),1) + 1 from TX_TYPE),'" + Is_DESC + "','" + Is_Index + "','" + Is_singlton + "','" + Is_cardinality + "','" + Is_node + "')";
            //call transaction function
 
            if (oraDA.transact(sqlArr))
            {
                bFlag = true;
            }
 
        }
 
        return bFlag;
 
        }
 
    }

is_desc staring like this ''imran
i want to insert into data base.
how is it possible

[kenobewan]

If you are trying to prevent sql injections, one way is using parameters. Not sure that I understand your question or why there is alot of code included.