Go to the boards at 4guysfromrolla.com and post your ASP questions. This is a discussion board for borg's ASP components.
That being said...the apostrophe/SQL issue is one of the fundamental issues in terms of security of an ASP application and the proper design of a working ASP application.
When using a SQL statement like that...always replace one apostrophe with two.
foo = Replace(variable,"'","''")
In SQL the apostrophe denotes the opening and closing of a quoted section. You can see that the apostrophe in the word don't is wreaking havoc with your SQL statement.
This simple oversight has led to what I estimate to be a MAJOR security flaw in 5% of ASP applications. Look up "SQL Injection" for all the gory details.
RTE Mod error using ’
Topic Options
Post Options
Thanks(0)
