如何在c#中将包含单引号的字符串保存到Oracle DB

Question

Hi.. I have to insert the below string into Oracle DB:

    String StrDiv = "<div STYLE=" + "'"+"font-family: " + lblPreviewPane.Font.Name + "; font-size: " + lblPreviewPane.Font.Size + "; color: " + ColorPicker1.Color + ""+"'" + ">" + lblPreviewPane.Text + "</div>";

I get the following in StrDiv:

    "<div STYLE='font-family: Times New Roman; font-size: 8pt; color: #CC33CC'>TEXTSAMPLE</div>"

But the problem is, when i insert the string into DB,an error is thrown: ORA-00917: missing comma

This is because of the single quotes in the STYLE attribute in .

Kindly guide me with a solution for mentioned issue.

Answer 1

You can use SQLCommand and SQLCommand.Parameters pass the StrDiv as Parameter and it should be fine

small example:

using (SqlCommand myCommand = new SqlCommand(
    "INSERT INTO table_name (column_name) VALUES (@StrDiv)")) {

    myCommand.Parameters.AddWithValue("@StrDiv", StrDiv);
    //...

    myConnection.Open();
    myCommand.ExecuteNonQuery();
    //...
}

Answer 2

Just use "''" to escape the "'" while inserting the data in db

String StrDiv = "<div STYLE=" + "''"+"font-family: " + lblPreviewPane.Font.Name + "; font-size: " + lblPreviewPane.Font.Size + "; color: " + ColorPicker1.Color + ""+"''" + ">" + lblPreviewPane.Text + "</div>";


"<div STYLE=''font-family: Times New Roman; font-size: 8pt; color: #CC33CC''>TEXTSAMPLE</div>"

Answer 3

Just replace your single quotes with twice single quote men's single quote two times. use Replace("'","''") for replacing single quote with twin single quote.