Re: How can legally include " ' " (single quote) in my SQL stateme

mboizeau_at_free.fr
Date: 03/17/05


Date: 17 Mar 2005 07:01:10 -0800

Yes "?" is the solutions.
I ve put a sample code here :
http://oraclevsmicrosoft.blogspot.com/2005/03/quotes-parameters.html

hope this helps

Marc Boizeau

http://oraclevsmicrosoft.blogspot.com

Erland Sommarskog wrote:
> Newbie (Newbie@discussions.microsoft.com) writes:
> > I take your advice and it works beautifully with MS Access. But, I
am
> > now getting an error of "ORA-00936: missing _expression" when I am
> > applying it to Oracle database. For some reason, Oracle does not
like
> > the use of parameters in SQL statement. My SQL statement is shown
in
> > the debug mode as below.
> >
> > insert into table_name
> > values(@param1, @param2)
> > where column1, column2
> >
> > I checked Oracle SQL syntax and found nothing missing or wrong with
this
> > statement. Have you ever experienced this problem? If so, how did
you
> > resolve it? Thanks again for your advice.
>
> I have never used Oracle, so I'm a bit off-base here. But it may be
> that you have to use ? instead of @var with the Oracle OLE DB
Provider.
>
> Note that this newsgroup is about using the OLE DB API, so it's not
> the best group to get answers for ADO .Net issues, and even less with
> Oracle syntax.
> --
> Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se
>
> Books Online for SQL Server SP3 at
> http://www.microsoft.com/sql/techinfo/productdoc/2000/books.asp



Relevant Pages

  • [NEWS] Oracle Forms SQL Injection
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... part of the Oracle Developer Suite 10g". ... All Oracle Forms applications are by default vulnerable to SQL Injection. ... The following statement sends the result of the SQL statement: ...
    (Securiteam)
  • Populating 10G XE table with time AND date through VB.Net
    ... This SQL statement delivered through VB.Net works fine: ... This is fair enough - presumably because the NLS_TIME_FORMAT is wrong format. ... If I run exactly same statement from within Oracle GUI SQL window I get: ...
    (comp.databases.oracle.server)
  • Re: The 20% rule
    ... Puget Sound Oracle Users Groupwww.psoug.org ... Plan hash value: ... good reasons why a full table scan was selected for the above SQL ... I had one row in the table when the SQL statement was hard parsed. ...
    (comp.databases.oracle.misc)
  • Complex Querys using instances of tables
    ... ORACLE approach, and they often give complex examples like this, what i ... Each time a report is run in Oracle, a record is written to this table ... The SQL statement below ...
    (microsoft.public.access.queries)
  • Re: Limit of 1050 columns for ANSI joins
    ... comprehensive than Oracle SQL. ... I'm trying not to have any auto-generated SQL on my system, ... Index your schema properly and think about the proper design. ...
    (comp.databases.oracle.server)