It always work automatically, even with form variables. The only problem might be when you use Evaluate() for dynamic variable names. Then the single quotes don't get escaped. Anyway, you should really use <cfqueryparam> to avoid all these problems.
INSERT INTO TBL (NAME) VALUES (<cfqueryparam cfsqltype="CF_SQL_VARCHAR" value="#form.myfield#">) Pascal Peters Macromedia Certified Instructor Certified ColdFusion (5.0) Advanced Developer Certified Web Developer LR Technologies, Belgium Tel +32 2 639 68 70 Fax +32 2 639 68 99 Email [EMAIL PROTECTED] Web www.lrt.be -----Original Message----- From: JAIME HOI [mailto:[EMAIL PROTECTED]] Sent: dinsdag 20 november 2001 4:50 To: CF-Talk Subject: RE: How to save single quotes into DB thanks! but then i juz realise that Coldfusion will automatically handle this part ONLY IF i do not use the form variable directly. I need to assign that form variable to another variable before setting it into DB. Then it works automatically. ! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

