Quotation mark problem in VB.NET + database

Use can use the Replace function to get rid of single quotes. Something like this

SQLQuery = "insert into Table(FirstName, LastName) Values (REPLACE('"&txtFirstName.Text&"','''',''),REPLACE('"&txtLastName.Text&"','''','') )"

Select allOpen in new window

Nice one but sorry to say didn't help

Use parameterized query, and then you don't need to worry about the quotation mark.

What is the error message that you are getting?
P.

Also, how about using a Replace function in VB instead of using it on sql server side.
http://msdn.microsoft.com/en-us/library/bt3szac5(VS.80).aspx
P.

SQLQuery = "insert into Table(FirstName, LastName) " & "Values ('" & txtFirstName.Text.Replace("'","''") & "','" & txtLastName.Text.Replace("'","''") & "')"

Select allOpen in new window

Many thanks for this, but sorry to say this didn't help.
I know that parameterized query is one solution... but me being lasy do not want to change the code. I need something similar to .Replace or can I replace the quotation mark in the form validation?

what is your input in textboxes that createp problem?

Thanks for all ur help... I hope I managed to stop the wrong input at the form itself... used the regular expression... ^[ \t\r\n\v\fa-zA-Z0-9_-]*$

Hey, don't close it!
I can give you the correct answer here it is :

Just replace the quotation with additional quote in it:

for example this one:

txtFirstname.text.Replace("'","''")

SQLQuery = "insert into Table(FirstName, LastName) " & "Values ('" txtFirstName.Text.Replace("'","''") "','" txtLastName.Text..Replace("'","''") "')"

Select allOpen in new window

I provide you the correct answer

So I object

by using the code I gave you, you can still use the quotation in your query... So o need to remove it.

I wanted to remove the single quotation not... & the solution provided is not helpful & does not work

@prabhatia

Your previous comment (24911008) I know that parameterized query is one solution... but me being lasy do not want to change the code. I need something similar to .Replace or can I replace the quotation mark in the form validation?

You mention you need something simalar that works like if you are using parameterized query. In parameterized query quotation mark is not replace or removed. So, I gave you the code that works and accept a string with quotation mark in it.

This is the reason why I object, when you request to delete this question.

what was that non english comment... was that an abuse???