SQL insert/update problem if coldfusion field value has single quote

[strutsng@gmail.com]

On the coldfusion form, if the user enter the data with single quote in
a field (e.g. Joe's Party), and performs SQL insert or update
statements, it turns out the data in database (Oracle in my case) will
become Joe''s Party.

Any ideas why? And any solutions to this problem?

please advise. thanks!!!

[strutsng@gmail.com]

On the coldfusion form, if the user enter the data with single quote in
a field (e.g. Joe's Party), and performs SQL insert or update
statements, it turns out the data in database (Oracle in my case) will
become Joe''s Party.

Any ideas why? And any solutions to this problem?

please advise. thanks!!!

[Franklin Cross]

<strutsng@gmail.com> wrote in message
news:1130208335.790058.68010@g43g2000cwa.googlegro ups.com...

> On the coldfusion form, if the user enter the data with single quote in
> a field (e.g. Joe's Party), and performs SQL insert or update
> statements, it turns out the data in database (Oracle in my case) will
> become Joe''s Party.
>
> Any ideas why? And any solutions to this problem?
>
> please advise. thanks!!!
>

Not sure why that is happening, but if you never figure it out, as a last
resort you could use REreplace to change all ' to the ascii equivalent:
&#039;

Make sure to escape that pound!