Help: Omitting quotes from SQL Queries.

[Eric Brunel]

keithk wrote:
> Hi All,
> 
> I am using an mx.ODBC connection to MSSQL and am iterating through a
> list to get data from the DB, for eg:
> 
> for fileName in fileNameList:
>         cursor.execute("SELECT fileSize FROM database where
>         database.filename = '%s'" % fileName)
>         fileSizes = cursor.fetchall()
> 
> However, when it iterates through the list and fileName equals something
> like "Hello World's" with a single quote inside the query fails as the
> string is ended prematurely, does anybody know how I can solve this?

fileName.replace("'", "''") ?

Doubling the quotes should do the trick.

HTH
-- 
- Eric Brunel <eric.brunel at pragmadev.com> -
PragmaDev : Real Time Software Development Tools - http://www.pragmadev.com