On Mon, 2012-01-23 at 00:15 +0100, M. Cs. wrote:
> I have a dinamically created query text. I don't know the number of
> parameters passed to the DB.Exec, so I cannot use &1,&2,... form. I
> need to use the DB.Quote()
> My problem is: If I have a string
> mystring="Blackmore's Night",
> the DB.Quote(mystring) won't quote the ', so the query will crash. In
> fact I'm getting query string
> SELECT * FROM CATALOGS WHERE VName='Blackmore's Night'....
> It occurs with sqlite database.
> Is there any solution for that?

In MySQL there is a function to escape your data before doing and
INSERT/UPDATE. If the quote is the only issue, then use
VName='Blackmore''s Night'


------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Gambas-user mailing list
Gambas-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/gambas-user

Reply via email to