|
ASP Kitchen:
SQL Server Articles: How to use apostrophes in SQL Server's Transact SQL
Since strings are normally enclosed within single quotes in Transact SQL, it can be a problem if the string's text
contains an apostrophe within it, such as the query below:
SELECT *, FROM Products WHERE ProductName = 'King's Jalapeno Peppers'
Obviously this SQL query would fail due to the apostrophe in the ProductName. Thankfully though, the solution is simple -
just put two apostrophes in the string, as shown below:
SELECT *, FROM Products WHERE ProductName = 'King''s Jalapeno Peppers'
Replacing the single quotes with two single quotes should be done wherever a string that may
potentially contain a single quote is used within a query. This can be achived in most programming languages by using
a Replace function. For example, in Visual Basic.NET the syntax to use would be the following:
Dim ProductName As String = "King's Jalapeno Peppers"
Dim SQL As String
SQL = "SELECT *, FROM Products WHERE ProductName = '" & Replace(ProductName, "'", "''") & "'"
Similarly, in C# the Replace function can be used in an identical way:
Dim ProductName As String = "King's Jalapeno Peppers"
Dim SQL As String
SQL = "SELECT *, FROM Products WHERE ProductName = '" & Replace(ProductName, "'", "''") & "'"
If your strings are being obtained from user input (e.g. from a web form) then
don't forget to remove other characters from strings as well in order to guard against SQL injection attacks. See this
article guarding web applications against sql injection attacks
for more information.
Useful Development Tools
| ASP
Documentation Tool |
| Automatically creates technical documentation for ASP 2.0
and 3.0 web applications written in VBScript and JScript. Documentation for Microsoft
Access, SQL Server 7/2000 databases and Visual Basic 6.0 components associated with the
web application can also be incorporated into the reports. Documentation is created in
HTML, HTML Help and plain text formats. |
View Sample
Output (HTML Help format).
View Sample Output (HTML Format).
Download
Trial Version (5.2Mb ZIP file). |
| .NET Documentation Tool |
| Automatically creates technical documentation for .NET Framework applications written in C# or VB.NET (including ASP.NET).
Documentation for SQL Server 7/2000/2005 databases and C#/VB.NET components associated with the
web application can also be incorporated into the reports. Documentation is created in
HTML, HTML Help and plain text formats. Additional support for ASP.NET web applications. A useful alternative to NDoc! |
View Sample
Output (HTML Help format).
View Sample Output (HTML Format).
Download
Trial Version (3Mb ZIP file). |
| SQL
Documentation Tool |
| The SQL Documentation Tool creates technical documentation for Microsoft SQL Server 7.0, 2000 and 2005 databases. Technical documentation is created in HTML and HTML Help formats. The HTML Help format documentation is fully searchable and cross referenced. The SQL Documentation Tool documents SQL Server Tables, Views, Stored Procedures, Triggers, Table Relationships, Jobs and DTS Packages. |
View Sample
Output (HTML Help format).
View Sample Output (HTML Format).
Download
Trial Version (10.3Mb ZIP file). |
| Text Workbench |
| Text Workbench is a file search and replacement utility for text files and Microsoft Office documents. Make rapid file replacements on multiple files and folders full of files. Advanced replacement options include regular expressions support. It even works on remote file systems via FTP. A Regular Expression Laboratory allows advanced pattern matching and replacement expressions to be built and tested. This great utility will make your everyday development tasks much easier!
|
Download
Trial Version (3Mb ZIP file; you have the option to either install directly from this link or save the file for later installation). |
| ASP Spell Check |
| ASPSpellCheck is the easy way to add spell checking capabilities to your ASP or ASP.NET websites, Intranets and web applications. The utility allows you to add spell checking capabilities to any HTML text field or rich content editing text box. It works with all common web browsers, and there are no components or databases to install on the server.
|
Read ASPSpellCheck Review.
View ASPSpellCheck Examples.
Download
Trial Version (3Mb ZIP file; you have the option to either install directly from this link or save the file for later installation). |
Author details
Brett Burridge
has worked as a web developer since 1997 and has developed web applications for a range of corporations, start up busiensses and educational establishments.
Brett is presently employed as an Internet developer and technical writer
through his own company,
Winnersh Triangle Web Solutions Limited.
The company produces a number of
innovative products, including a range of software documentation tools, which include the
ASP Documentation Tool, the .NET Documentation Tool for VB.NET and C#, and the SQL Server Documentation Tool. Other products include The Website Utility, which functions as a website error checker, search engine optimizer and ASP/ASP.NET search engine builder application.
As well as the ASPAlliance, Brett has written articles for Ariadne.ac.uk,
ASPToday, the software documentation portal www.softwaredocumentation.info, and has contributed recipes to the ASP.NET Developer's Cookbook.
links
Outside web development, Brett is interested in travelling (here are my travel logs from New York, Hong Kong and Tokyo), digital photography (here's my photo gallery), tropical fishkeeping
and collecting contemporary works of art by artists such as Doug Hyde.
Contact Brett by emailing
ASP Kitchen:
SQL Server Articles: How to use apostrophes in SQL Server's Transact SQL
|
|