Code Luck

   29         /// 

   30         /// make search text input sql safe.

   31         /// 

   32         /// 

   33         /// 

   34         private static string SafeSqlLikeClauseLiteral(string inputSQL)

   35         {

   36             // Make the following replacements:

   37             // '  becomes  ''

   38             // [  becomes  [[]

   39             // %  becomes  [%]

   40             // _  becomes  [_]

   41 

   42             string s = inputSQL;

   43             s = inputSQL.Replace("'", "''");

   44             s = s.Replace("[", "[[]");

   45             s = s.Replace("%", "[%]");

   46             s = s.Replace("_", "[_]");

   47             return s;

   48         }

   49         /// 

   50         /// make text input sql safe

   51         /// 

   52         /// 

   53         /// 

   54         private static string SafeSqlLiteral(string inputSQL)

   55         {

   56             return inputSQL.Replace("'", "''");

   57         }

   58         /// 

   59         /// convert '' to ' when returning to the user, Remember, only to be used

   60         /// when returning strings to user.

   61         /// 

   62         /// 

   63         /// 

   64         private static string Desanitize(string output)

   65         {

   66             return output.Replace("''", "'");

   67         }