Quotes

Question

i have a problem in my program. i have a program that will allow user to enter comment and the comment get inserted into a table. the problem i am having is that when user enter text with quotes, my program fail to insert. if there any way i can escapes the text the user enter.
sample comment
status is Failed ID - '?' and db rejected
this comment is passed to a procedure which is then inserted into a table.

Answer 1

It's not the procedure that is having the problem. I suspect that the caller of the procedure needs to formulate the String correctly. As an earlier poster suggested escaping with '' will work. How is the String being retrieved from the user?
SQL> create table test_quote( col1 varchar2(32) );
Table created.
SQL> create procedure insert_test_quote( p_col1 varchar2 ) as
2 begin
3 insert into test_quote values (p_col1);
4 end;
5 /
Procedure created.
SQL> declare my_string varchar2(32) := 'This is a test ''quote''';
2 begin
3 insert_test_quote( my_string );
4 end;
5 /
PL/SQL procedure successfully completed.
SQL> select * from test_quote;
COL1
This is a test 'quote'