Inputting single code string data

[pwint]

Hi
I have a problem in inputing single code(') string into the SQL database. I wrote in ASP language and connect to the SQL server to insert the data.
If the data contains single code string (e.g women's group)the syntax error appears and it stops.
I tried to change the double code(")instead of single one to insert the data and then, it also has error "does not permit column name ...." or something like that.
How can i solve the problem to input the data that contains single code(')?
Any help appreciated. Thanks.

[mattglet]

Here's a past post that includes a function you can call (see the last post).

[webmasterworld.com...]

[mrMister]

Simply replacing the quotes is a bad habit to get in to. You create a lot of security vulnerabilities by using ad-hoc SQL statements like that.

Use your favourite search engine and search for information on parameterized SQL queries in ASP.