Memo: Re: SQL update/insert for a string contain " ' "

Here's a possibility. Scan desc prior to execution for single quote. If found
then replace with 2 single quotes not 1 double quote. SQL should not read this
as a close.
So would end up with "Tom''s Desk" with 2 single quotes between m and s.
Done this in VB (ugh!) rather than java but, after all, it's all SQL....

 rgds,

Keith





"Xu, Weining" <Weining.Xu@AIG.com> on 04 Oct 2001 14:07






To:   "'JAVA400-L@midrange.com'" <JAVA400-L@midrange.com>
cc:     (bcc: Keith MCCULLY/HIBM/HSBC)
Subject:  SQL update/insert for a string contain " ' "





Hi, all,

I am using JDBC to perform update/insert for DB2 on AS400.  The user types
inputs from a Java GUI. For example, when user types in "Tom's desk" in a
text field.  I will update the field with the typed string.  The partial
code is like this:

String desc = getJTextFieldDesc().getText();

String update = "update myTable set DESCRIPTION = '"+desc+"' where ID = 1";

stmt.createStatement();
stmt.executeUpdate(update);

The update will return error, since the string passed into SQL update
statement would be 'Tom's Desk'.  The SQL hit the first closing "  '  "
after letter m rather after letter k.

Any solutions?  Thanks for your help.

_______________________________________________
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
To post a message email: JAVA400-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
or email: JAVA400-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.



************************************************************
This message originated from the Internet. Its originator
may, or may not be who they claim to be, and the information
contained herein may, or may not be accurate.
************************************************************






__________________________________________________________________

This transmission has been issued by a member of the HSBC group ("HSBC")
for the information of the addressee only and should not be reproduced
and / or distributed to any other person. Each page attached hereto must
be read in conjunction with any disclaimer which forms part of it.
This transmission is neither an offer nor the solicitation of an offer
to sell or purchase any investment. Its contents are based on information
obtained from sources believed to be reliable but HSBC makes no
representation and accepts no responsibility or liability as to its
completeness or accuracy.