411 REFERENCE · Wikibooks
Coding Cookbook/SQL Encode
Reference material by Wikibooks contributors. This retains its source identity and is not 411 news reporting.
Encode various datatypes for safe usage in SQL commands.
VBScript solution
function SQLEncode (vInput)
dim CurrentLocale
select case VarType(vInput)
case 0,1 ' empty, null
SQLEncode = "NULL"
case 2,3 ' integer, longint
SQLEncode = vInput
case 4,5 ' single, double
CurrentLocale = GetLocale
SetLocale ("en-us")
SQLEncode = CStr(vInput)
SetLocale (CurrentLocale)
case 7 ' date
SQLEncode = "#" & _
DatePart("yyyy", vInput) & "-" & _
DatePart("m", vInput) & "-" & _
DatePart("d", vInput) & " " & _
DatePart("h", vInput) & ":" & _
DatePart("n", vInput) & ":" & _
DatePart("s", vInput) & "#"
case 8 ' string
SQLEncode = vInput
SQLEncode = Replace (SQLEncode, chr(0), "")
SQLEncode = Replace (SQLEncode, "'", "''")
SQLEncode = "'" & SQLEncode & "'"
end select
end function
SQL Encode
SQL Encode