There is single and double quotes in the address textbox .How can I insert into database. I am using SQL2005.
My code is as follows…
str = "exec sp_cust_reg '" + customer.Cust_Id + "','" + customer.Cust_Name + "','" + customer.Gender + "','" + customer.Acc_no + "','" + customer.Address + "','" + customer.Pin_no + "','" + customer.Phone_no + "','" + customer.Mobile_no + "','" + customer.Email + "','" + customer.Authorise + "'";
Address is jo”hn’s house
Its Text Visualizer is as follows…
exec sp_cust_reg 'C7','George Joseph','Male','0001-212123','jo"hn's house','515151','04862787896','8888888888','johnyqw@gmail.com','N'
I used
string sql = str.Replace("\'", " ");.
Then I get
exec sp_cust_reg C7 , George Joseph , Male , 0001-212123 , jo"hn s house , 515151 , 04862787896 , 8888888888 , johnyqw@gmail.com , N
You escape
'as''.So instead of
str.Replace("\'", " ")usestr.Replace("'", "''")