asp net remove special characters before insert? VB

Question

0.00/5 (No votes)

See more:

Here is my deal... i have some products in my database that have special characters in the names. I need to remove these before inserting into a table.

i have some dropdownlists for the values of the product and id and such.

here is one of the products: 3'x5'x1/2" USG NEXT GENERATION DUROCK. I need to remove the ' after the 3 and 5.

you can see below i tired to remove these special characters before inserting into the table. - look at product1.selecteditem.text.remove("'", "")) here is where i am trying to remove these characters. But i cannot figure it out.

please help! VB

SQL

cmd.CommandText = "INSERT INTO Table(blahblahblah) values('" & Trim(Literature.SelectedValue) & "', '" & Trim(Literature.SelectedItem.Text) & "', '" & Trim(Product1.SelectedValue) & "', '" & Trim(Product1.SelectedItem.Text.Remove("'", "")) & "', '" & Session("UserInfo") & "')"
cmd.ExecuteNonQuery()

Posted 11-Oct-12 7:51am

PTG.Jake

Add a Solution

Comments

[no name] 11-Oct-12 14:17pm

That's because the remove method returns a new string object so you are essentially calling the remove method and simply throwing the results away.

4 solutions

Solution 1

Use Regex.Replace[^] method. Example[^]

Posted 11-Oct-12 7:59am

Maciej Los

Solution 3

I would suggest these two ways:

1) Front End Handling:

In your case, you have to use string.Replace() method. Personally, I prefer RegEx iff there is a condition to look for a specific pattern like finding a string that start with number and replace it with something else, if its a static text string.Replace is enough.

2) Back End Handling: (If using SQL)

You can rely on QUOTENAME function. Recommended Read

Posted 11-Oct-12 9:18am

Shahan Ayyub

Solution 4

That's the wrong way of handling it. The single quotes cause problems because you create the query by concatenating strings. When you create a parameterized query instead, and then add the parameters' values, those special characters will be handled correctly automatically.

Posted 12-Oct-12 0:32am

Bernhard Hiller

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

PTG.Jake · Accepted Answer · 2012-10-11T08:24:00

Solution 2

instead of remove i used replace("'", "") works good!

Posted 11-Oct-12 8:24am

PTG.Jake