Ignore single quote in C#

Question

In my program I have this statment ......

ct = String.Format(@"select [Movie Selector] from WSTMDS3
            natural prediction join 
            (select

             '{0}'as[Age],
            '{1}'as[Education Level],
            '{2}'as[Gender],
            '{3}'as[Home Ownership],
            '{4}'as[Internet Connection],
            '{5}'as[Marital Status]

            )as MovieSelector",
             TextBox1.Text,
             DropDownList1.SelectedValue,
             DropDownList2.SelectedValue,
             DropDownList3.SelectedValue,
             DropDownList4.SelectedValue,
             DropDownList5.SelectedValue)
                ;

But in DropDown list1 "Education Level " I have some value like this Master' Degree how i can use the single quote ' in this statment .

thanks

I think you should clarify your question if user1208484's answer is not what you're looking for. — Yogu, May 04 '12 at 11:29
I think you would like to build a sql-statement. Try SQL-Parameters — Tomtom, May 04 '12 at 11:23

score 10 · Answer 1 · edited May 23 '17 at 11:51

10

You should not use string.Format to build your queries. You should use parameterized queries.

adomdCommand.CommandText = "SELECT ... @P1 ...";
adomdCommand.Parameters.Add(new AdomdParameter("P1", TextBox1.Text));
// etc..

Related

edited May 23 '17 at 11:51

Community

1
1

answered May 04 '12 at 11:21

Mark Byers

811,555
193
1,581
1,452

score 1 · Answer 2 · answered May 04 '12 at 11:24

1

Use SqlCommand and SqlParameter. Example

SqlCommand sqlCom=new SqlCommand();
sqlCom.CommandText=@"select [Movie Selector] from WSTMDS3
        natural prediction join 
        (select

         @P0 as[Age],
        @P1 as[Education Level],
        @P2 as[Gender],
        @P3 as[Home Ownership],
        @P4 as[Internet Connection],
        @P5 as[Marital Status]

        ";
sqlCom.Parameters.AddWithValue("@P0",TextBox1.Text);

answered May 04 '12 at 11:24

user1208484

110
2

No problem with DMX statment just in qute i need to ignore the qute – AYKHO May 04 '12 at 11:26

score 0 · Answer 3 · answered May 04 '12 at 11:25

0

Besides using parametrized queries - the escape method for single quotes in T-SQL syntax is to double them.

answered May 04 '12 at 11:25

kaiz.net

1,984
3
23
31

Ignore single quote in C#

3 Answers3