ASP Programming
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsProgramming Languages - MoreASP Programming

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old October 30th, 2003, 04:49 PM
xtremcoder xtremcoder is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: Houston, TX
Posts: 131 xtremcoder User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 7 h 32 m 32 sec
Reputation Power: 6
Send a message via AIM to xtremcoder Send a message via Yahoo to xtremcoder
ever had trouble with ' (single quote) ?

some people may know this, but i just spent about an hour thinking of how i could insert data into my DB that contained apostrophes. for example, I wanted to insert Bailey's well, my SQL statement was being cut off when it hit the ' and i was getting all sorts of errors. i was writting some complex stuff to take out the ' then re-insert it when being displayed... blah. lots of work. then i thought, what if i replace my ' with " in my insert statement. guess what, it works!

like i said, some of you may know this, but i thought id share my experience with you just in case someone runs across the same problem.

Reply With Quote
  #2  
Old October 30th, 2003, 10:51 PM
aaron.martone's Avatar
aaron.martone aaron.martone is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Oct 2003
Location: Central Florida
Posts: 76 aaron.martone User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 5
Send a message via ICQ to aaron.martone
Do you hand code?

I used DWMX and notice it used ASP's Replace function to do the same thing. It was at that point that I looked into it and learned how apostrophes can break SQL code, and things like SQL Injection protection.

It's good knowledge to know! SQL IS a Microsoft Technology. So it's good to know as many loopholes as you can; cause as long as M$ makes software, there will always be loopholes, bugs and errors.

Reply With Quote
  #3  
Old October 30th, 2003, 11:22 PM
xtremcoder xtremcoder is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jul 2003
Location: Houston, TX
Posts: 131 xtremcoder User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 7 h 32 m 32 sec
Reputation Power: 6
Send a message via AIM to xtremcoder Send a message via Yahoo to xtremcoder
yes i code in notepad :-)

Reply With Quote
  #4  
Old October 31st, 2003, 11:34 AM
INF INF is offline
Standards User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2003
Posts: 146 INF User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 6 m 4 sec
Reputation Power: 6
Actually, SQL server is a Microsoft technology. SQL (Structered Query Language) was originally developed by IBM, and is used in most relational db's.

Reply With Quote
Reply

Viewing: Dev Shed ForumsProgramming Languages - MoreASP Programming > ever had trouble with ' (single quote) ?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 2 hosted by Hostway