How to write 'in a SQL query?

Question

I need to use the ' characters in an access request.

but if I write select Fname from MEN where Fnale = 'j'o' I get an error

how to write characters '

Thanks in advance

Answer 1

Try backslash \' or two quotation marks. ''

It depends on your database. MySQL uses \' and Microsoft SQL and MS Access use two quotation marks. ''

Answer 2

Single quotes can be escaped with two single quotes.

 SELECT Fname FROM MEN WHERE Fnale = 'j''o' 

Answer 3

For SQL Server:

 var cmd = new SqlCommand("select fname from MEN where fnale = @query", myConnection); cmd.Parameters.AddWithValue("@query", "j'o"); 

All solutions to which you add your parameter to the sql string are incorrect (or at least at high risk) because they are vulgar for SQL Injection attacks.

You mentioned "access request", for Microsoft Access / Ole use the following syntax:

 var cmd = new OleDbCommand("select fname from MEN where fnale = ?", myConnection); cmd.Parameters.AddWithValue("?", "j'o"); // Order does matter 

Answer 4

I would use a literal string to avoid escaping everything

 string query = @"select Fname from MEN where Fnale = 'jo'"; 

If you avoid this with regard to SQL, use another single quote to avoid quotes:

 select Fname from MEN where Fnale = ''jo'' 

Answer 5

As others have said, you can escape quotes. But if you send this request with C #, then it is better to use parameters - this way all the escaping is done for you, so you can’t forget about the special case when user input can still cause unwanted effects. ( small bobby tables , anyone? :-))

Answer 6

Try replacing 'with'