Yep, the "catapostrophe" is VERY dangerous with SQL -- it is a principle means of SQL injection attacks (google that).
One way to prevent this is to parse the string to escape the apostrophes before it goes into the db.
I believe most SQL db's use double apostrophes ('' = TWO ' characters, NOT a double quote) for this, look in your docs.
Another way to prevent this is by using stored procedures (google again...)
In reply to Re: cleaning up sql from file
by halfcountplus
in thread cleaning up sql from file
by Anonymous Monk
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |