accepter ping i text

sådan her
text = replace(str,"'","''")

eller:

str="Nicole's giver fejl"
str=Replace(str,"'","'")

hvor i scriptet skal den ind ?

str="Nicole's giver fejl"
strSQL="INSERT INTO [tabel](txt) VALUES('"&Replace(str,"'","'")&"')"

Nicole's var bare et exempel mm12010

gem funktionen ser således ud:

<%
Set Conn = Server.CreateObject("ADODB.Connection")
Conn.Open "DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=" & server.MapPath("xxxx.mdb")

SQL = "insert into hold (holdnavn,deltager,mail) values("
SQL = SQL & "'" & Request.Form("holdnavn") & "', "
SQL = SQL & "'" & Request.Form("deltager") & "', "
SQL = SQL & "'" & Request.Form("mail") & "')"
Conn.Execute(SQL)

conn.Close
Set conn = nothing
Set SQL = nothing

response.redirect ("RetListe.asp")

else

response.write "Du skal udfylde *alle* felter!<br>"
response.write "<a href='java script:history.go(-1)'>Tilbage</a>"
end if

ElseIf Request("mode") = "gem" then

set conn = server.createobject("ADODB.connection")
path = Server.MapPath("dream.mdb")
conn.Open "DBQ="& path &";DefaultDir="& path & ";Driver={Microsoft Access Driver (*.mdb)}"

SQL="UPDATE spillere SET "
SQL = SQL & "spillernavn='" & spillernavn & "', "
SQL = SQL & "handicap='" & handicap & "', "
SQL = SQL & "sidsterunde='" & sidsterunde & "', "
SQL = SQL & "klasse='" & klasse & "', "
SQL = SQL & "totalt='" & totalt & "' "

SQL = SQL & " where sid = " & CInt(Request.Querystring("sid"))
'response.write sql

Set RS = Conn.Execute(SQL)

response.redirect ("RetListe.asp")

else
end if
%>

SQL = "insert into hold (holdnavn,deltager,mail) values("
SQL = SQL & "'" & Replace(Request.Form("holdnavn"),"'","&#39;") & "', "
SQL = SQL & "'" & Replace(Request.Form("deltager"),"'","&#39;") & "', "
SQL = SQL & "'" & Replace(Request.Form("mail"),"'","&#39;") & "')"
Conn.Execute(SQL)

siger tak, smider du ikke lige et svar også mm12010

selv tak :o)