Help please

[Pol Millan]

Hi everyone,   I've got the following code.   var1=var1.replace((char)39,'`'); var2=var2.replace((char)39,'`'); quer="INSERT INTO mytable VALUES ('"+var1+"','"+var2+"')"; int istatus=stmt.executeUpdate(quer); Is there any other characters that I cannot use within var1 and var2 apart from ' ? Thanks, Pol Millan top-pile.com Ibex House 162-164 Arthur Road Wimbledon Park London, SW19 8AQ Tel: +44 (0)181 255 6777 Fax: +44 (0)181 255 6776 Web: www.top-pile.com (& follow links) Email: [EMAIL PROTECTED]