I am inserting records into an Access table using the OleDbCommand class. The insert values come from a basic web form with text boxes. If the values contain ' or " it creates a problem. What is the proper way to escape these characters? Surely there's a built-in function for it somewhere.
View RepliesI'm having a problem finding/using an escape character with this ASP/JScript application I'm creating. Basically I have text sometimes that has apostrophes or double quotations in them, but they won't be INSERTED unless I manually take them out.
Ex: INSERT INTO tbl1 (vendor,reason) VALUES (81,"This is only a test, but there is an apostrophe and it's only going to make things worse.")
That apostrophe in "it's" is kiling everything. I've used the replace method to change it to " ' ", but that STILL doesn't work. I can't find MS SQL's ESCAPE CHARACTER. I've tried several directions of the backslash, but no luck.
I am trying to only have a link show if there is a certin value in the DB. This is what I am trying:
<% if (rsWelcome.Fields.Item("access_level").Value) = "admin" then
response.Write("| - <a href="sps_main.asp">Sales Training Support </a>-")
end if %>
BUT... this is the error I get:
Expected ')'
/sta/topnav_test.asp, line 9 response.Write("| - <a href="sps_main.asp">Sales Training Support </a>-") How do I use quotes in a "response" and have the app server ignore them??
Info
DB: Oracle(9i), where I generate query strings programatically and send them to the DB server.
I have rtfm'd and googled this extensively, but I have not found how to properly esacape the ampersand character in an oracle query (I'm NOT using the SQL+ command line interface).
Oracle uses the & character to denote a variable substitution, and unfortunately one of the fields I must query has data that contains the & character. I need to know how to escape the & character in my query strings so that Oracle will treat it as a string literal. Code:
I have a 'memo' form field being entered into an access database.If people put in characters other then text (Quotes, operators, etc) then I get an insert error:
----
User Input: oh let's see - a va
Error:
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression ''oh let's see - a va', 'No additional comments submitted')'.
----
Is there a way to get this into the database? In php, I would simply use the function 'addslashes()' (escaping the string) - is there a similar function in ASP or am I doing something else wrong?
I have a client that will be submitting a form that will have copy/text in 3 languages, English, German, and Italian. The last two languages have a lot of special characters. What I am finding is that when the form is submitted the characters for german and italian get stored in an Access database as jibberish if you will. how to make sure that the text is submitted, stored, and then displayed as it should be?
View Replies View RelatedI'm trying to input data into an access database using asp and I'm using double as the number field type in access. And whenever the number is inserted it is around 9 digits sometimes the number begins with 2 zeros but when inserted the beginning zeros are deleted. How can I have the number inserted and keep the initial zeros?
View Replies View RelatedAnyone know if it is possible to update/insert a database record into a dynamically specified field.
The code I have here holds data in an asp session, ownerId, storeid and product type.
I can insert a record into the Productcat table, fields OwnerId and surfboards, no problem.
But what I would like is to insert the ownerid then insert poduct type into the field sepcified in the session variable (session("prodtype")) and/or strprodtpye
For Example
Insert OwnerId + product type into productcat into fileds ownerId and field labled ''strprodtype'' (variable, surfboard, wetsuit, boots, etc)
SQLstatement = "INSERT INTO Productcat (Ownerid,'"&strprodtype&"') "
I have tried using different methods, but the closest I got was IIS error msg ='field not found ("Surfboards", "wetsuits", "boots", etc)' Code:
OK, I realize this is a subject that almost every developer would encounter, so I understand the answer is probably out there somewhere. Suffice it to say that I have been looking, both in this forum and on google, found many SQL server answers, and one for Access, which I have tried with no success. See the following: Code:
sql = "INSERT into someTable(IntColumn) values (" & fakeValue & ") SELECT @@IDENTITY"
set rs = conn.execute(sql)
response.write "New ID was " & rs(0)
This results in a JET database error, Missing semicolon at end of SQL statement. I tried adding it after the close paren, after the select @@identity, and after both, with the same error.
Trying to insert the following information (collected from a form) into an access database.
"INSERT INTO Products (Make, Model, Description, Features, EduPrice, ComPrice, OffPrice, IsOffer, Picture) VALUES ('" & strMake & "', '" & strModel & "', '" & strDescription & "', '" & strFeatures & "', '" & strEduPrice & "', '" & strComPrice & "', '" & strOffPrice & "', " & strIsOffer & ", ' & strPicture & ')"
keep getting a sytan error though!
"Syntax error in INSERT INTO statement."
I am used to SQL Server, no Access, but this one thing has to be done in
Access. Can you tell me if this query will work, based on the syntax?
I am trying create a new row on the database, in one table, and the primary
key is an Autonumber called PersonalID. This is on the second page, which
shows after the personal has filled out some info on the first page, then
submitted the form using POST. Database name is Shape, and table is named
Personal. Code:
I tried to insert time using now() and failed,
time= date();
conn = Server.CreateObject("ADODB.Connection");
rs = Server.CreateObject("ADODB.Recordset");
conn.Open("DRIVER={Microsoft Access Driver (*.mdb)};DBQ=" +
Server.MapPath("generator.mdb") + ";");
sqlQuery = "INSERT INTO table1 ([time]) VALUES (" +
time + ")";
conn.Execute(sqlQuery);
Does Anyone Know How To Add HTML into An Access Database? I Am Building A Blog And Have A WYSIWYG Editor. I Get An Illeagle Character Error When I Try To Put HTML Into The Database.
View Replies View RelatedI need to insert into an access table multiple times i know how to insert 1 item but not multiple times.
View Replies View Relatedhow can i insert the images in any format in MS Access database using the ASP plz give me a simplest and easy code which i can use in ASP
View Replies View RelatedI have been doing adodb connections and using Access2000 for several lightweight websites. I have never had any problem with any of the SQL commands to insert, update, delete, etc.
I can insert a record into a memo field just fine ... up to a certain number of characters (nowhere near the 65K limit). After several hundred characters, the insert fails ... nothing happens ... the execute just idles and no insert is done. Anyone help? I have read about data types, etc., but everything I read sounds as if ASP and Access 2000 are suppose to handle the type conversions. They have been doing it up to this certain size.
I want to insert the data into the MS Access Database using Visual Basic 6.0. Anybody please heplp me to tell the steps to insert the data into the database.
I working on a ASP project (usually I'm a PHP guy) and I wanted to encode a string to make it safe for a SQL insert. Is there a function built into ASP for that or do I just need to replace single quotes?
View Replies View Relatedthe problem is in database the name of customer displays like
%mike O' lee but user want to see name like mike O lee.
How can i do it in asp script.
I've a problem reading querystring parameters that are 'uri encoded'. Anyone
has a solution for this?
To reproduce the problem, create a classic ASP containing the following code:
-----------------------
<p>Value sent via querystring: <%=
Server.HTMLEncode(Request.QueryString("value")) %></p>
<input id="input" />
<button id="submit" onclick="window.location.assign('Test.asp?value=' +
encodeURIComponent(input.value));">submit</button>
-----------------------
Now, enter the value "Dré" and submit. The page will show the value "Dré",
but I except Request.QueryString("value") to return the original value, i.e.
"Dré".
I'm still having trouble getting some of my data being returned properly when people use quotes. (ex ProjectName contents being - the "primary" project - The double quotes are the main issue. I am using a function for the single quote and it seems to have resolved the issue.
Code:
Term = trim (Term)
if Term <> "" then
Term = Replace (Term, chr (39), chr (39) & chr (39))
end if
If Term <> "" then
I use this just when passing strings from a form. I tried altering it and using chr (34) for a double quote but it didn't work.
Is it possible to escape asp tags so i can add em to another variable like this:
text = "<% downloads="&cats&" %>"
When chucking data in cookie you cannot use certain characters in this example ‘ : ‘ . To get around this you use escape and unescape. Trying to use the escape as such:
Response.Cookies("Lines")("URL4") = escape("http://www.ASP101.com")
Gives the following result:
URL4=http%3A//www.ASP101.com
Which I don't think does anything to help. So using it like this:
Response.Cookies("Lines")("URL4") = "escape(http://www.ASP101.com)"
Gives the following result:
URL4=escape(http://www.ASP101.com)
Which is the correct result apart from the ‘escape' actually appearing.
im tryin to do this:
response.write("<body topmargin='0' leftmargin='0' onLoad='window.resize('" & width & "', '" & height & "')'>")
i need to run it like this though:
response.write("<body topmargin='0' leftmargin='0' onLoad="window.resize('" & width & "', '" & height & "')">")
in php i can replace it like onLoad = "window.resize
is there something like that in asp?
is escape char in asp script and how we can encode the url in asp script?
View Replies View RelatedI've been looking for it for a while. I found it a week back by accident, but didn't need to use it then. It's a function that escapes SQL strings so that if there is a ' in the string it will escape it for you. I can remeber the name of it.
View Replies View RelatedHere's the line I need to insert into an ASP page.
<script Language="JavaScript" src="/blarg.js"></script></head>
Right now it throws off the asp include with the quotes.
my form contains two text fields(name, address) and two file field control where user can insert image(photo1 and photo2), i want to insert this data in to ms access when the user submits the form?
this is my code for insert text fields to access data base.but i have no idea about the code for image fields. In my access data base i set photo1 and photo2 as herf (binary data). Code:
How to prevent duplicate values when using BULK INSERT to insert CSV to SQL Server? Code:
View Replies View RelatedI have this insert statement where instruction field in the DB is a memo field.
SQL="INSERT INTO int ([instruction]) VALUES " & _
"('"&Request.Form("myTextarea")&"')"
objConn.Execute(SQL)
Its giving me error:
Error Type:
Microsoft OLE DB Provider for ODBC Drivers (0x80040E14)
[Microsoft][ODBC Microsoft Access Driver] Syntax error in INSERT INTO statement.
i need to convert the escape values which are by mistake updated in DB.
example:
this is a sample text string
is updated in DB as
this%20is%20a%20sample%20text%20string
here %20 is the space.
like wise there are many entries for :,'
is there way that i can update all this in a update statement?
or use asp to to update the records?
I have a login form in which i have logins for company as 'National City"
But when i capture the login name to give it in my query on some other form as Request.Querystring(username)
Its recognises it as National%20City...
i dont want to chhange my login names and keep it as NationalCity as one full word.How can i tell ASP to recoginze this as a space in the query ?
How do I delete the last character in a string?
View Replies View Related