Re: SQL statement contain " character



It works for me delphi 7 and Sql 2000

Parameter datatype ftString.

I'd check your parameter data type.

Bill
"Dave Albiston" <mail@xxxxxxxxxxxxxxxxxx> wrote in message
news:43db5cfc$1@xxxxxxxxxxxxxxxxxxxxxxxxx
> My application stores text which often contains the " character for
> inches. I am dynamically constructing a statement like:
>
> update Tablename
> set TextField = 'Could not save with " in text',
> .
> .
> where TableID = ..
>
> The statement is accepted by SQL Server 2000 using Query Analyzer but
> fails when I execute it with a TADOQuery in D2005. The error message is:
>
> 'Parameter object is improperly defined. Inconsistent or incomplete
> information was provided.'
>
> If I remove the " character it works. It also works with the character if
> I set ParamCheck to false.
>
> Is there an explanation or is this a bug?
>
> Dave


.



Relevant Pages

  • Re: [Full-disclosure] noise about full-width encoding bypass?
    ... We have tested this technique for both XSS and SQL Injection with IIS ... character to the actual character (so %uFF07 is actually translated by ... this technique could be useful for a homograph attack. ...
    (Full-Disclosure)
  • Re: MSDE KB829358 Update Repeats Indefinitely
    ... registry makes it go away, I was a bit concerned about trashing a legitmate ... > It's ok bill it's just one of those "Features" ... >> Do you actually mean KB 829358 "Overview of the Critical Update for SQL ... >> Please either delete or modify the content of the ProductCode key in the ...
    (microsoft.public.windows.server.sbs)
  • Re: VB ADO.NET Concurrency, Access, date fields and parameters
    ... Hi Bill, thank you very much for your help, it is much apreciated. ... >> I then edit a date in the grid. ... > Not sure what your update command looks like but that's the likely source. ... > There's no profiler that I konw of for Access, but if you ever use SQL ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: VB Chinese Code Problem
    ... Unicode String constants in SQL must be prefixed by an 'N' character, ... Similarly, when storing String variables back to the database, no ... In order to successfully show the Chinese characters on your screen, ...
    (microsoft.public.vb.general.discussion)
  • Re: MSDE KB829358 Update Repeats Indefinitely
    ... It's ok bill it's just one of those "Features" ... You actually don't have to delete the key, just manually install it and it ... > Do you actually mean KB 829358 "Overview of the Critical Update for SQL ...
    (microsoft.public.windows.server.sbs)