problemer med ' i sql streng

Du replacer bare ' med \' og omvendt når du henter data.

town = Replace(Request.QueryString("town"), "'", "\'")

Men det virker stadig ikke:

[MySQL][ODBC 3.51 Driver][mysqld-4.0.18-standard-log]You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Ivoire')' at line 1

replace med 2 ', altså replace(str, "'", "''")

hmm, ja. Fandt denne her i mit bibliotek, prøv den:

replace(tmpString, "'", "&#39")

Function RTEsafe(strText)

  Dim tmpString

  tmpString = trim(strText)

  'convert all types of single quotes
  tmpString = replace(tmpString, chr(145), chr(39))
  tmpString = replace(tmpString, chr(146), chr(39))
  tmpString = replace(tmpString, "'", "&#39")

  ' convert all types of double quotes
  tmpString = replace(tmpString, chr(147), chr(34))
  tmpString = replace(tmpString, chr(148), chr(34))
  tmpString = replace(tmpString, """", "\""")

  ' replace carriage returns & line feeds
  tmpString = replace(tmpString, chr(10), "<br />")
  tmpString = replace(tmpString, chr(13), " ")
 
  RTEsafe = tmpString
End function

eller

Server.HTMLEncode(strMessage)

Stadig samme fejl, desværre

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

Nu kærer jeg med town = Server.HTMLEncode(Request.QueryString("town"))

Og jeg udskriver sql'en for "sjov"

sqlstr = "INSERT INTO airport(faa, city, country) values('" & code & "', '" & town & "', '" & country & "')"
Response.Write(sqlstr)
Conn.Execute(sqlstr)

Det giver:

INSERT INTO airport(faa, city, country) values('ABJ', 'Abidjan', 'Cote D'Ivoire')
Microsoft OLE DB Provider for ODBC Drivers error '80040e14'

[MySQL][ODBC 3.51 Driver][mysqld-4.0.18-standard-log]You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'Ivoire')' at line 1

Nu har jeg røvet alle jeres løsninger, men ingen af dem fungerer.

Senest var det funktionen, men ak:

http://www.legendenet.dk/airport.asp?code=ABJ&town=Abidjan&country=Cote%20D'Ivoire

Cote D&#39;Ivoire skriver den i databasen nu, og det er vel fint nok. Problemet lå delvist i at jeg troede Cote D'Ivoire var town variablen, men det var country :P Ja, jeg skal have tæsk, ved det godt :)) Smid et svar hyberpreprocessor...

hehe okay :)

:)

og tak for points ~)