replace a ' (apostrophe) with a space (e.g. ""): apostrophe, replace, asp, space

by: hongjunPosted on 2005-04-27 at 04:32:31ID: 13874933

Try something like this

<script language="JavaScript" type="text/javascript">

</script>

<form name="myform" method="post" action="" onsubmit="return validate()">
<input name="heading<%=i%>" type="text" size="100" onkeyup="fun(this)">
</form>

hongjun

by: rdivilbissPosted on 2005-04-27 at 06:43:06ID: 13875954

If you are replacing the apostophe so you can put the value in a database then there is a better way to do this... please advise.

by: rdivilbissPosted on 2005-04-27 at 06:52:31ID: 13876041

Use parameters when adding, updating and deleting records.

You not only solve the apostrophe problem, but you will avoid most cross site scripting attacks. When you build a SQL statement on the fly from input, the input becomes executable SQL. The vast number of different encoding methods makes it impossible to proactively filter all harmful input.

A parameter will never be treated as executeable SQL, so it is tremendously safer. (It is also faster for complex statements.)

Here is an example:

Dim cmd, conn, RS, cmdText, param, numAffected, connectionString
Const adVarChar = 200
Const adParamInput = = &H0001
Const adExecuteNoRecords = &H00000080

connectionString = Application("examples") ' e.g. "Provider=Microsoft.Jet.OLEDB.4.0;Data Source='E:\web\database\examples.mdb'"

Set cmd = Server.CreateObject("ADODB.Command")
Set conn = Server.CreateObject("ADODB.Connection")
conn.Open(connectionString)

Set cmdText = "INSERT INTO members (username,password) " &_
"VALUES (@username,@password);"

Set param = cmd.CreateParameter(@username,adVarChar,adParamInput,CLng(50),request.form("usernm"))
cmd.Parameters.Append param
Set param = cmd.CreateParameter(@password,adVarChar,adParamInput,CLng(50),request.form("pswd"))
cmd.Parameters.Append param

cmd.commandText = cmdText

cmd.Execute numAffected,, adExecuteNoRecords

When you retieve your data and need to display it in a web page you can use Server.HTMLEncode(rs("whatever")) to display the field correctly, including any apostophes.

That way you do not alienate Mr. O'Brian.

Regards,
Rod

by: jutimesPosted on 2005-04-27 at 12:09:37ID: 13879453

this is how i would do it in ASP in order to use apostrophe in a search engine or any text form, this is used when selecting items from a SQL database.
when you are declaring your variables use a replace statement, sort of like this.

testname = Request.QueryString("Name")
testname = Replace (testname ,"'","''")

that should replace an ' with a (space)

Hope this helps.

by: acperkinsPosted on 2005-05-04 at 07:07:16ID: 13926772

I realize you are fairly new here, so I suggest you read the EE Guidelines regarding grading standards at:
What's the right grade to give?
http://www.experts-exchange.com/Databases/Microsoft_SQL_Server/help.jsp#hi73

And specifically this section:

<quote>
C: Because Experts' reliability are often judged by their grading records, many Experts would like the opportunity to clarify if you have questions about their solutions. If you have given the Expert(s) ample time to respond to your clarification posts and you have responded to each of their posts providing requested information; or if the answers, after clarification, lack finality or do not completely address the issue presented, then a "C" grade is an option. You also have the option here of just asking Community Support to delete the question.

Remember, the Expert helping you today is probably going to be helping you next time you post a question. Give them a fair chance to earn an 'Excellent!' grade and they'll provide you with some amazing support. It's also true that a "C" is the lowest grade you can give, and the Experts know that -- so use it judiciously.

Only the Moderators and Page Editors have the choice to give a D grade. Beyond that, in a practical sense, the grading guidelines have "softened" a bit over the last year or two; one might expect that the majority of grades would be Bs (a standard "bell" curve), but the fact is that the culture of the site has caused there to be an inordinately high percentage of As. The Moderators have been instructed to ensure that the As they award are actually "Excellent" answers. Similarly, the C grade is the lowest that can be given by a member, a fact which should be kept in mind when grading as well.

The use of a C in a vindictive manner is likely to be changed by a Moderator. You may not like the answer you get, and in some cases, and you may not like the way it is delivered, but if it is deemed to be accurate, no less than a B is an acceptable grade.
</quote>

Thanks.

Question

replace a ' (apostrophe) with a space (e.g. "")

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

apostrophe

replace

asp

space

Active Server Pages (ASP)

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Need individual assistance?

Our experts are ready to help.

Want to learn from the best?

Read articles from industry experts.

Working on a long term project?

Store your work and research.

What Makes Experts Exchange Unique?

Trusted by the world's most respected brands.

Faithfully serving IT professionals since 1996.

Related Solutions

Free Tech Articles

Cloud Class Webinars

Join the Community

Give a Little. Get a Lot.

Answers

3 Ways to Join

The Experts

The Experts

Testimonials

Testimonials

Testimonials

Business Clients

Business Clients

In the Press

In the Press

In the Press