while updating the db with asp
it gives me error when the formating of the contents entered in the editor contains some " or ' - as i think - so ..
this is the update query ...
"
set q=conn.execute("update user set user.content = '"& str & "' WHERE id=" & session("id") & " " )
"
i think when it meets the (") in the text it ends the query & the error happens ...
the "server.htmlencode" converts it to a shape to be shown as tags in the web page & when leaving it without converting the (") makes error
please help me ... i'm running out of time
thanks in advance ...
it gives me error when the formating of the contents entered in the editor contains some " or ' - as i think - so ..
this is the update query ...
"
set q=conn.execute("update user set user.content = '"& str & "' WHERE id=" & session("id") & " " )
"
i think when it meets the (") in the text it ends the query & the error happens ...
the "server.htmlencode" converts it to a shape to be shown as tags in the web page & when leaving it without converting the (") makes error
please help me ... i'm running out of time
thanks in advance ...
RE: can't insert data into access DB
set q=conn.execute("update user set user.content = '"& Replace(str, "'", "''") & "' WHERE id=" & session("id") & " " )
RE: can't insert data into access DB