Pl/sql encoding javascript parameter problem

Question

I am using an html form to get user input via radio buttons via the following segment
htp.p('<input type="radio" value="a" onSelect="saySomething('fish')">');
However, when the brackets surrounding (fish) are encountered an error occurs
Line No. 41 : PLS-00103: Encountered the symbol "FISH" when expecting one of the following:
. ( ) , * @ % & | = - + < / > at in mod not range rem => ..
<an exponent (**)> <> or != or ~= >= <= <> and or like as
between from using is null is not || is dangling
The symbol ". was inserted before "FISH" to continue.
(WWV-17050)
ORA-24344: success with compilation error (WWV-11230)
Critical Error in wwerr_api_error.get_errors! SQL Error Message: ORA-06502: PL/SQL: numeric or value error: character string buffer too small (WWV-)
Is there a better way to program user input or how can I overcome the javascript parameter passing problem
Many regards
Eddie

Answer 1

To include single quotes into literal strings in SQL and PL/SQL, you need to escape (double) them or replace them with concatenations with CHR(39):
htp.p('<input type="radio" value="a" onSelect="saySomething(''fish'')">');
or
htp.p('<input type="radio" value="a" onSelect="saySomething('||chr(39||'fish'||chr(39||')">');