Re: SQL update/insert for a string contain " ' "

["David Morris" <David.Morris@xxxxxxxxxxxxx>]

Fred,

I would recommend (for portability) that you also use substitution for the key.
so DESCRIPTION = ? where ID = 1"); becomes
DESCRIPTION = ? where ID = ?");

One argument made was for portability. SQL is fast to build and reasonably
portable. In my experience, unless you have time to build or understand a
framework that targets portability, your best bet is encapsulating common
database tasks and to use SQL when possible.

David Morris