Apostrophe issue when writing a string to SQL Server in VB.net

Question

I am having issues writing this string to my SQL 200 database table:

Conversion from string "" to type 'Integer' is not valid.

How can I ensure that my vb.net app writes the above string exactly as it appears, to the field in the table ?

Answer 1

I'd recommend using SqlCommand and SqlParameters, rather than raw SQL strings - for a variety of reasons. To escape characters in SQL, by default, I believe you simply need to double them up (eg. ' becomes '').