Apostrophe Issue within an application

Question

I have a large application (25 pages+) that includes customer details. When the last name of the customer contains an apostrophe ('), the application is corrupted. Lists don't wortk, buttons don't work etc etc. All sorts of unexplainable activities occur.
Is this a known issue and is there something I need to do to fix this? By simply removing the apostrophe from the name takes away all the issues, but I cannot do that long-term as customer details are being populated from many sources and the names do actually contain apostrophes.
Any help would be mich appreciated.
Stewart

Answer 1

toalst wrote:
All I can resolve is that I have a hidden field that I am populating via the following sql statement:
Select cnlname from contact where cnid = :P0_CNID;
....that I am using via a javascript call to another application.How?
When I change the statement to:
Select replace(cnlname,'''') from contact where cnid = :P0_CNID;
....everything seems to work OK.
I have displayed fields that are running a similar statement (not used in the JavaScript call) and when I leave them as is, not replacing the apostrophe, all is OK.
When I turn the problem field to displayed, still an issue.
HOWEVER, when I leave the field as hidden, and leave it as the data base field (cnlname), yet take it out of the JavaScript call, all is OK. So it seems to be stemming from the JavaScript call.
In saying all that, I can strip the apostrophe out of the hidden field only and I have made changes to the JavaScript call to cater for this so whilst I have not resolved the issue, I have been able to workaround it. Unless my latest information gives you some more to go on?The apostrophe in the column value is being treated as a string terminator in JavaScript, leading to the JS and HTML following it becoming hopelessly garbled and unrunnable. Escape values being passed to JS properly using the <a href="<tt>apex_javascript.escape</tt> method:
select apex_javascript.escape(cnlname) from contact where cnid = :P0_CNID;