problematic characters in SQL

hi,

I know that sql server don't like commas and certain formating characters passed into it's tables. What is the best way to deal with this, is that a built in function which removes such data or are you expected to write your own?

cheers

There aren't any real "problem characters", per se. The issues that arise when using SQL occur because of the syntax used to insert/update string values. That is (for those that don't already know ), single quotes are needed around strings. Obviously then, if you attempt to insert a string containing a single quote, the SQL engine will assume that when it hits your single quote, this signifies the end of the string. To get around this, simply perform a replace function on any string you wish to insert in the db, replacing single quotes with 2 single quotes (not double quotes). This same logic also applies when using the ';' after a single quote, signifing the end of the SQL statement.

To write your own string validator shouldn't be too much of a problem. You should be able to do it in only a few lines (read: 1 ). Write this handler as a function (or class), that can be reused in all your future applications.