[thelist] Re: Adjusting strings for SQL

[Chris Marsh]

Casey

[..]

> response.write "<input type='hidden' name='block' value=' "&block&" '>

Response.Write "<input type='hidden' name='block' value='" &
Replace(block, "'", "''") & "'>"

This replaces each single quote with two single quotes, thus escaping
the single quote which is itself a character designating comments in
VBScript.

[..]

Regards

Chris Marsh