On Mon, 2012-01-23 at 00:15 +0100, M. Cs. wrote: > I have a dinamically created query text. I don't know the number of > parameters passed to the DB.Exec, so I cannot use &1,&2,... form. I > need to use the DB.Quote() > My problem is: If I have a string > mystring="Blackmore's Night", > the DB.Quote(mystring) won't quote the ', so the query will crash. In > fact I'm getting query string > SELECT * FROM CATALOGS WHERE VName='Blackmore's Night'.... > It occurs with sqlite database. > Is there any solution for that?
In MySQL there is a function to escape your data before doing and INSERT/UPDATE. If the quote is the only issue, then use VName='Blackmore''s Night' ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Gambas-user mailing list Gambas-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/gambas-user