Apostrophe?

message from Dan O'Shea on 19 Jul 2004

When using the database application to create an Add page
(INSERT>APPLICATION OBJECTS>RECORD INSERTION FORM) to the database, I
MERC = replace(MERC,"'","''")

But when I created the Update page (INSERT>APPLICATION OBJECTS>RECORD
INSERTION FORM), the Master page carries the query string to the
Update page.

The query string gives me an error when I try to Update the database:

Microsoft JET Database Engine error '80040e14'

Syntax error (missing operator) in query expression 'MERC = 'Stanley's
Tire Service''.

/Merchants/MerchantUpdate.asp, line 124

The code for the update page is below, thanks for any help:

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>

<%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) = "form1" And
CStr(Request("MM_recordId")) <> "") Then

MM_editConnection = MM_JIdata_STRING
MM_editTable = "Merchants"
MM_editColumn = "MERC"
MM_recordId = "'" + Request.Form("MM_recordId") + "'"
MM_editRedirectUrl = "/Merchants/MerchantDisplay.asp"
MM_fieldsStr =
"MERC|value|WEBSITE|value|CONTACT|value|ADDRESS|value|CITY|value|STATE|value|ZIP|value|PHONE01|value|PHONE02|value|MOBILE|value|FAX|value|PAGER|value|EMAIL|value|DSCP|value"
MM_columnsStr =
"MERC|',none,''|WEBSITE|',none,''|CONTACT|',none,''|ADDRESS|',none,''|CITY|',none,''|STATE|',none,''|ZIP|none,none,NULL|PHONE01|',none,''|PHONE02|',none,''|MOBILE|',none,''|FAX|',none,''|PAGER|',none,''|EMAIL|',none,''|DSCP|',none,''"

MERC = replace(MERC,"'","''")
CONTACT = replace(CONTACT,"'","''")
CITY = replace(CITY,"'","''")
DSCP = replace(DSCP,"'","''")

' create the MM_fields and MM_columns arrays
MM_fields = Split(MM_fieldsStr, "|")
MM_columns = Split(MM_columnsStr, "|")

' set the form values
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
Next

' append the query string to the redirect URL
If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And
Request.QueryString <> "") Then
MM_editRedirectUrl = MM_editRedirectUrl & "?" &
Request.QueryString
Else
MM_editRedirectUrl = MM_editRedirectUrl & "&" &
Request.QueryString
End If
End If

End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId"))
<> "") Then

' create the sql update statement
MM_editQuery = "update " & MM_editTable & " set "
For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
MM_formVal = MM_fields(MM_i+1)
MM_typeArray = Split(MM_columns(MM_i+1),",")
MM_delim = MM_typeArray(0)
If (MM_delim = "none") Then MM_delim = ""
MM_altVal = MM_typeArray(1)
If (MM_altVal = "none") Then MM_altVal = ""
MM_emptyVal = MM_typeArray(2)
If (MM_emptyVal = "none") Then MM_emptyVal = ""
If (MM_formVal = "") Then
MM_formVal = MM_emptyVal
Else
If (MM_altVal <> "") Then
MM_formVal = MM_altVal
ElseIf (MM_delim = "'") Then ' escape quotes
MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
Else
MM_formVal = MM_delim + MM_formVal + MM_delim
End If
End If
If (MM_i <> LBound(MM_fields)) Then
MM_editQuery = MM_editQuery & ","
End If
MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " &
MM_formVal
Next
MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " &
MM_recordId

If (Not MM_abortEdit) Then
' execute the update
Set MM_editCmd = Server.CreateObject("ADODB.Command")
MM_editCmd.ActiveConnection = MM_editConnection
MM_editCmd.CommandText = MM_editQuery
MM_editCmd.Execute
MM_editCmd.ActiveConnection.Close

If (MM_editRedirectUrl <> "") Then
Response.Redirect(MM_editRedirectUrl)
End If
End If

End If
%>
<%
Dim MerchantMaster__MMColParam
MerchantMaster__MMColParam = "1"
If (Request.QueryString("MERC") <> "") Then
MerchantMaster__MMColParam = Request.QueryString("MERC")
End If
%>
<%
Dim MerchantMaster
Dim MerchantMaster_numRows

Set MerchantMaster = Server.CreateObject("ADODB.Recordset")
MerchantMaster.ActiveConnection = MM_JIdata_STRING
MerchantMaster.Source = "SELECT MERC, WEBSITE, CONTACT, ADDRESS, CITY,
STATE, ZIP, PHONE01, PHONE02, MOBILE, FAX, PAGER, EMAIL, DSCP, CTGY,
TYPE FROM Merchants WHERE MERC = '" +
Replace(MerchantMaster__MMColParam, "'", "''") + "' ORDER BY MERC ASC"
MerchantMaster.CursorType = 0
MerchantMaster.CursorLocation = 2
MerchantMaster.LockType = 3
MerchantMaster.Open()

MerchantMaster_numRows = 0

%>
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>

<body>
<form method="post" action="<%=MM_editAction%>" name="form1">
<table align="center">
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Company:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="MERC"
value="<%=(MerchantMaster.Fields.Item("MERC").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Website:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="WEBSITE"
value="<%=(MerchantMaster.Fields.Item("WEBSITE").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Contact:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="CONTACT"
value="<%=(MerchantMaster.Fields.Item("CONTACT").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Address:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="ADDRESS"
value="<%=(MerchantMaster.Fields.Item("ADDRESS").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">City:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="CITY"
value="<%=(MerchantMaster.Fields.Item("CITY").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">State:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="STATE"
value="<%=(MerchantMaster.Fields.Item("STATE").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Zip:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="ZIP"
value="<%=(MerchantMaster.Fields.Item("ZIP").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Phone:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="PHONE01"
value="<%=(MerchantMaster.Fields.Item("PHONE01").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Phone:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="PHONE02"
value="<%=(MerchantMaster.Fields.Item("PHONE02").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Mobile:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="MOBILE"
value="<%=(MerchantMaster.Fields.Item("MOBILE").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Fax:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="FAX"
value="<%=(MerchantMaster.Fields.Item("FAX").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Pager:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="PAGER"
value="<%=(MerchantMaster.Fields.Item("PAGER").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Email:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="EMAIL"
value="<%=(MerchantMaster.Fields.Item("EMAIL").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"><strong><font size="2" face="Verdana,
Arial, Helvetica, sans-serif">Description:</font></strong></td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="text" name="DSCP"
value="<%=(MerchantMaster.Fields.Item("DSCP").Value)%>" size="32">
</font></td>
</tr>
<tr valign="baseline">
<td nowrap align="right"> </td>
<td> <font size="2" face="Verdana, Arial, Helvetica,
sans-serif">
<input type="submit" value="Update Record">
</font></td>
</tr>
</table>
<input type="hidden" name="MM_update" value="form1">
<input type="hidden" name="MM_recordId" value="<%=
MerchantMaster.Fields.Item("MERC").Value %>">
</form>
<p> </p>
</body>
</html>
<%
MerchantMaster.Close()
Set MerchantMaster = Nothing
%>

Archived message: Apostrophe? (Macromedia Dreamweaver)