double quote in sql

[Greg Chu]

I am using vb.net to retrieve data from access mdb.

when I tried to specify a sql string

.... where xyz = "123"

how do I specify the double quote?

I tried use
dim sqlstr = .... & """ & "123" & """

it would not take the last """, complaing end of statement needed.

Please help!

Thanks!

Greg

[Noozer]

"Greg Chu" <gr******@wendys.com> wrote in message
news:eu**************@TK2MSFTNGP14.phx.gbl...

I am using vb.net to retrieve data from access mdb.

when I tried to specify a sql string

... where xyz = "123"

strSQL = "SELECT ... WHERE xyz = ""123"""
or
strSQL = "SELECT ... WHERE xyz = '123'"

[wayne hamilton]

dim sqlStr as String
dim sqlVar as String

sqlVar = "123"
sqlStr = "where xyz = """ & sqlVar & """"

In SQL you should be able to use a Single Quote instead. (Required in SQL
Server.)

sqlStr = "where xyz = '" & sqlVar & "'"

"Greg Chu" <gr******@wendys.com> wrote in message
news:eu**************@TK2MSFTNGP14.phx.gbl...

I am using vb.net to retrieve data from access mdb.

when I tried to specify a sql string

... where xyz = "123"

how do I specify the double quote?

I tried use
dim sqlstr = .... & """ & "123" & """

it would not take the last """, complaing end of statement needed.

Please help!

Thanks!

Greg

[Herfried K. Wagner [MVP]]

"Greg Chu" <gr******@wendys.com> schrieb:

I tried use
dim sqlstr = .... & """ & "123" & """

it would not take the last """, complaing end of statement needed.

Use parameters instead of putting together the SQL command string by hand to
prevent SQL injection:

<URL:http://groups.google.de/groups?selm=eb11vcS0DHA.2604%40TK2MSFTNGP09.phx.gb l>

--
M S Herfried K. Wagner
M V P <URL:http://dotnet.mvps.org/>
V B <URL:http://dotnet.mvps.org/dotnet/faqs/>

[Cor Ligthert]

Greg,

To make the answers not to complicated for you, have a look at the answer
from Noozer,

The other answers are completly beside your question.

Cor