Inserting ASCII into your SQL string. ?

fastedge · #1 (**permalink**) 02-21-2006, 10:15 AM

Hi everyone. I'm stuck trying to insert a ULR string into a SQL DB that strips certain characters from anything passed to it as protection against SQL insert hacks.

My problem is that the URLs that I'm passing have the offending characters "?" and "=".

I'm trying to pass those as ASCII but for the life of me can't remember how and can't seem to find any info on how on the web. Really need help here.

ASP, VBScript, SQL2000.

Thanks.

ADAM Web Design · #2 (**permalink**) 02-21-2006, 12:19 PM

I've never had a problem passing them as is into an executable (insert, update) query.

If you're trying to retrieve them, then I'd just replace the characters with \? and \= so that the literals are taken.

mktplace · #3 (**permalink**) 02-21-2006, 07:23 PM

server.URLencode

Keimos · #4 (**permalink**) 02-21-2006, 09:49 PM

They are reserved codes and should be treated as such

In code the = is a mathematical and function operator.

The ? is an opening to the question or query that is asked

As in email ?Subject= , no where else have I seen these as anything else.

So sorry I cannot help at the moment but you have got me thinking

Keimos