SQL Stored Procedure Problem "Single Quotes"

[tranzformerz]

Quotes is something we all should be aware of when passing values to a Stored
Procedure. However, this specific scenario I am really stuck on.


SQL Stored Procedure:
select *
from tbl_table
where forum_id IN ('first value,'second value')


I'm trying to pass "First Value & Second Value" using a variable. The "QUOTES"
gives problems when passing it to the procedure. I tried using other datatypes,
but no luck. Any thoughts?

[TA-Selene]

You just need to wrap the entire variable (including your single quotes) in the
PreserveSingleQuotes function. Basically, you need to double up your quotes
when apssing so they will be escaped. This function does it for you.

[tranzformerz]

Another way of looking at the Select Statement is:

SQL Stored Procedure:
declare @var int
set @var = '1','2'
select *
from tbl_table
where forum_id IN (@var)

Just by looking at it, when setting @var to '1','2' you will get an error. I
hope this helps in getting a better perspective on this.

Thanks again....

[tranzformerz]

TA-Selene thanks! I will give this a try and will post back my findings.

[tranzformerz]

PreserveSingleQuotes did not solve the problem, however good function to
consider when dealing with quotes. The problem was that this specific problem
didn't work when using a STOREDPROCEDURE. I just did a straight CFQUERY rather
than CFSTOREDPROC. There maybe other ways of approaching this, but this one
worked. Thanks TA-Selene for the effort. I greatly appreciate the promptly
response.