Internet explorer 9 issue with escaping double quotes javascript

Question

Below is my case: var sql = 'INSERT INTO \\"template_items\\" (\\"item\\") VALUES (\\"0a\\")';

alert(sql) gives below value:

INSERT INTO "template_items" ("item") VALUES ("0a")
which is correct and shows correct escaping of double quotes.

But when variable sql is viewed in IE9 debugger(F12) below is its value

"INSERT INTO \\"template_items\\" (\\"item\\") VALUES (\\"0a\\")"

Backslash is still there.

Now this is creating problem when i use variable sql in below statements:

connection.BeginTrans();

connection.Execute(sql);

connection.CommitTrans();

What is the solution to this problem?

Answer 1

First off; You should NEVER make SQL in the frontend!!! It's a HUGE security hole!

Second: To fix the problem in your console you could use single quotes around your text and double inside: var text = 'some " quotes " in " text' (but this shouldn't be a problem when the backend receives your string)

Answer 2

In case anybody else is facing same issue,

[accessdb.js][1] works good.

I debugged this and found recordset.open missed some parameters .