Problems with buildind sql string

[Ianpbaker]

can somone please advise me on ways not to go on this site ever again as it is so fecking addictive and will completly take over my life



The application I am building has a update facility that takes values from access puts them into varios text boxes, lets the user change the value (etc)

I then build a sql string and do a db.execute to update the string is built as below.

strSQL = "UPDATE tblhotels " & _
"SET hotelkey = '" & txtHotelkey & "'," & _
"accomodationtype = " & cboacomtype & "," & _
"starrating = '" & Cbostars & "'," & _
"hotelname = '" & txtname & "'" & _
" WHERE hotelkey = '" & strHotelkey & "'"

This works fine as long as there are no ' in the text

is there any way of getting around this