replace :D

i min kode skal jeg replace tegnet ' med '' så der ikke kommer fejl når jeg sætter det ind i databsen (hvis altså brugeren skriver ')

men hvor skal koden være ? :D

<%
Set Conn = Server.CreateObject("ADODB.Connection")
DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; "
DSN = DSN & "DBQ=" & Server.MapPath("database.mdb")
Conn.Open DSN

SQL1 = " UPDATE forums SET Antal_Topics = Antal_Topics + 1 WHERE ForumID = " & Request.Querystring("ForumID")
Conn.Execute (SQL1)

SQL2 = " UPDATE forums SET Antal_Posts = Antal_Posts + 1 WHERE ForumID = " & Request.Querystring("ForumID")
Conn.Execute (SQL2)

SQL3 = "Insert into topics ("

SQL3 = SQL3 & "ForumID, "
SQL3 = SQL3 & "Topic_Navn, "
SQL3 = SQL3 & "Topic_Starter, "
SQL3 = SQL3 & "Antal_Svar, "
SQL3 = SQL3 & "Antal_Set) "


SQL3 = SQL3 & "values( "

SQL3 = SQL3 & "'" & Request.Querystring("ForumID") & "', "
SQL3 = SQL3 & "'" & Request.Form("navn") & "', "
SQL3 = SQL3 & "'" & Session("loginnavn") & "', "
SQL3 = SQL3 & "'0', "
SQL3 = SQL3 & "'0')"

Conn.Execute(SQL3)

SQL4 = "Select TOP 1 * from topics order by TopicID desc"
Set rs4 = Conn.Execute(SQL4)


SQL5 = "Insert into posts ("

SQL5 = SQL5 & "TopicID, "
SQL5 = SQL5 & "Post_Tekst, "
SQL5 = SQL5 & "Poster, "
SQL5 = SQL5 & "Post_Tid) "

SQL5 = SQL5 & "values( "

SQL5 = SQL5 & "'" & rs4("TopicID") & "', "
SQL5 = SQL5 & "'" & Request.Form("tekst") & "', "
SQL5 = SQL5 & "'" & Session("loginnavn") & "', "
SQL5 = SQL5 & "'" & FormatDateTime(Now, vbLongDate) & " kl. " & FormatDateTime(Now, vbShortTime) & "') "

Conn.Execute(SQL5)

Conn.Close
Set Conn = Nothing

Response.Redirect("forum.asp?ForumID=" & Request.Querystring("ForumID") & "")
%>