Anyone know how to work with commas and apostrophes coming in as input from a form, and inserting this data into a record using SQL in ASP? If the user enters data with an apostrophe into a text box, ...
What you want to do is insert the data in the database with the ' replaced with '' . This escapes the apostrophe and won't mess up the query.