Dying to solve this problem :-( "SINGLE QUOTATION"

SQLServerCentral is supported by Red Gate Software Ltd.

Popular Topics

Home

Members

Calendar

Who's On

Home » SQL Server 2008 » SQL Server 2008 - General » Dying to solve this problem :-( "SINGLE...

Dying to solve this problem :-( "SINGLE QUOTATION"

Rate Topic

Display Mode

Topic Options

Author

Message

Ahmed_07

Posted Saturday, October 06, 2012 4:22 PM

Grasshopper

Group: General Forum Members
Last Login: Monday, November 05, 2012 12:45 AM
Points: 11, Visits: 16

it's only about ( SINGLE QUOTATION) in ASP.NET

here is my SQL Query:

SELECT ID, Title
FROM viewTopTitles
WHERE Title = ' you're most welcome '

but duo to the SINGLE QUOTATION I have a fatal Error, I tried to use function like this:

WHERE  REPLACE("you're most welcome", " ' ", " ' ' ")

...

Error I get with this is :
Msg 4145, Level 15, State 1, Line 3
An expression of non-boolean type specified in a context where a condition is expected, near ')'.

and thene tried like this :

WHERE  Title = REPLACE("you're most welcome", " ' ", " ' ' ")...

Error I get with this is :
Msg 207, Level 16, State 1, Line 3

IS THERE ANY BODY CAN GIVE ME A FULL EX. OF THE QUERY, OR TELLS ME HOW APPROPRIATE SHOULD I'VE TO USE THIS;

THANK YOU

PS: I AM KINDDA NEW TO THIS Ermm

Post #1369475

imex

Posted Saturday, October 06, 2012 4:37 PM

SSC Rookie

Group: General Forum Members
Last Login: Wednesday, February 27, 2013 6:54 AM
Points: 40, Visits: 168

Try:

WHERE Title = 'you''re most welcome'

Hope this helps.

http://www.imoveisemexposicao.com.br

Post #1369479

Ahmed_07

Posted Sunday, October 07, 2012 12:26 AM

Grasshopper

Group: General Forum Members
Last Login: Monday, November 05, 2012 12:45 AM
Points: 11, Visits: 16

thanks imex

but it would work in Query Engine in SQL Server but as in my case am in ASP.NET and can't fix with this all the links (Titles) that contain SINGLE QUOTATIONS

so how could I avoid the error dynamically ????? Ermm

Post #1369500

Ahmed_07

Posted Sunday, October 07, 2012 2:05 AM

Grasshopper

Group: General Forum Members
Last Login: Monday, November 05, 2012 12:45 AM
Points: 11, Visits: 16

I found it Smile

here is the solution


 public string mySTRING (string singleQ){
     return singleQ.Replace(" ' ", " ' ' ");
 }

SELECT ID, Title
FROM viewTopTitles
WHERE Title = mySTRING (you're most welcome)

SOURCE : http://www.sqlfr.com/forum/sujet-PROBLEME-AVEC-APOSTROPHE_1349006.aspx

info : the forum is in French lang but you should see the full code there probably understand :)

Post #1369507

Jeff Moden

Posted Sunday, October 07, 2012 8:23 AM

SSC-Dedicated

Group: General Forum Members
Last Login: Today @ 12:30 PM
Points: 32,893, Visits: 26,770

Ahmed_07 (10/7/2012)

I found it Smile

here is the solution


 public string mySTRING (string singleQ){
     return singleQ.Replace(" ' ", " ' ' ");
 }

SELECT ID, Title
FROM viewTopTitles
WHERE Title = mySTRING (you're most welcome)

SOURCE : http://www.sqlfr.com/forum/sujet-PROBLEME-AVEC-APOSTROPHE_1349006.aspx

info : the forum is in French lang but you should see the full code there probably understand :)

If you run that result query you posted, I'm pretty sure you'll find that it doesn't actually work. The single quote needs to have two single quotes and the whole string literal needs to be wrapped in single quotes.

--Jeff Moden

"RBAR is pronounced "ree-bar" and is a "Modenism" for "Row-By-Agonizing-Row".

First step towards the paradigm shift of writing Set Based code:
Stop thinking about what you want to do to a row... think, instead, of what you want to do to a column."

For better, quicker answers on T-SQL questions, click on the following...
http://www.sqlservercentral.com/articles/Best+Practices/61537/

For better answers on performance questions, click on the following...
http://www.sqlservercentral.com/articles/SQLServerCentral/66909/

Post #1369531

Ahmed_07

Posted Monday, October 08, 2012 3:12 AM

Grasshopper

Group: General Forum Members
Last Login: Monday, November 05, 2012 12:45 AM
Points: 11, Visits: 16

you're right, it's just that I didn't mentioned or write it in here, but I did wrap it with a single quotation to the whole string Smile

thank you

Post #1369679

Sean Lange

Posted Monday, October 08, 2012 9:22 AM

SSCrazy Eights

Group: General Forum Members
Last Login: 2 days ago @ 8:46 AM
Points: 8,547, Visits: 8,204

Or for an even better approach don't use pass through sql from your .NET app. Instead use parameters. From the issues you are facing it is very likely that your application is vulnerable to sql injection.

_______________________________________________________________

Need help? Help us help you.

Read the article at http://www.sqlservercentral.com/articles/Best+Practices/61537/ for best practices on asking questions.

Need to split a string? Try Jeff Moden's splitter.

Cross Tabs and Pivots, Part 1 – Converting Rows to Columns
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs

Post #1369887