Visual Basic - Dynamic queries with user parameters

[M.D.]

Hi,

If i have some dynamic query like that:

"select * from table where columnX like '* " & param & " *' "

here param is parameter, that the user inserts.
If he inserts something like: ababba'ababab or ababab"ababa
this will crash.
How should i replace the characters: ' and " ???

(In java i would simply make PreparedStatement that will take care fothat itself automatically. Is there a simmiliar method here too, or i should do it manually and what exactly)

TNX

[faulkner132]

In Microsoft SQL, I believe the escape char is represented by entering 2 of what you want in your SQL statement.
So for a single quote (') use '' (two single quotes), double quote use "", etc.

MySQL, I believe uses the forward slash (or back slash). Try both.
Single quote = /' (or \'), double quote = /" (or \"), etc.

[M.D.]

Thanks you very much. Ptoblem has been solved!!!