Trouble with cmdText and double quotes

[nikel]

Hi, I have an mdb database and I want to execute some queries but some cells are containing double quotes and I'm getting error.

My string:

Dim dbStr As String = "SELECT * FROM products_tbl WHERE product_name = '" + s + "'"

The error:

An unhandled exception of type 'System.Data.OleDb.OleDbException' occurred in System.Data.dll
Additional information: Syntax error (missing operator) in query expression 'product_name = 'ASUS X550JK İ5-4200H 4GB 500GB 15.6' VGA 2GB D''.

How can I fix this?

[IanRyder]

Hi,

Assuming that your variable “s” contains double or single quotes as part of the value you are searching for then you should really use Parameters with your OleDbCommand object to query your database correctly.

Have a read through this:-

OleDbCommand.Parameters Property

Hope that helps.

Cheers,

Ian

[nikel]

Thanks for the reply. I searched for a long time however I couldn't adapt oledbcommand.parameters to my code. I'm newbie to vb.net and actually I need some help with searching a column for a specific value.

[techgnome]

Dim dbStr As String = "SELECT * FROM products_tbl WHERE product_name = ?"
'set that as the commandtext of your command object.

'then use 
.Parameters.AddWithValue("ProdName", s)
'To add the value to the parameters collection

'Then execute your command and get your results back.

-tg

[nikel]

I have to sleep now. I'll check and inform you. Thanks a lot.

[nikel]

It works like a charm. Thanks again.