AddSlashes function for inserting SQL ?

[mparker1113]

For inserting variables in to SQL, PHP has addslashes() , is there an equivalent for ASP ? I want to enter user entered variables into a database but if they use an apostrophe, the program crashes.

[I.m.I]

u can use replace(string, "'","\'")
but for ms sql or access u can not
u can use replace(string, "'",""")

[mparker1113]

replace( ) okay -- thanks

[mattyblah]

You should really look into using stored procedures if you're using ms sql, it could alleviate these problems.