Insert Query for HTML string in SQL

Question

I have Sql database with table name QUESTION.

I want to insert value for QuestionTitle as html string. Insert query is

INSERT INTO 
   QUESTION (QuestionType,QuestionID,QuestionTitle) 
VALUES ("MRQ",
        "QNB5T6TKDMS",
        "<p><span style="font-family: comic sans ms,sans-serif; font-size: 
small;">what was the original concentration of the acid?</span></p>")

When I try to execute this query in Sql it gives an error . How can I do this so that it will work for html string.

it give error as:[ near "font": syntax error ] Exception Name: NS_ERROR_FAILURE — pallavi_ios, Jun 26 '14 at 06:31
You might want to check this question : Preventing SQL Injection in ASP.Net VB.Net : http://stackoverflow.com/questions/4018174/preventing-sql-injection-in-asp-net-vb-net — naota, Jun 26 '14 at 06:37
is it complusary to replace " with ' in insert statement at time of insert html value — pallavi_ios, Jun 26 '14 at 06:38
@pallavi_ios check it once again.I have edited answer.we can use any type of quotes — Techy, Jun 26 '14 at 06:40

score 4 · Accepted Answer · edited Jun 26 '14 at 06:44

4

You have error in using " inside the third inserted value

INSERT INTO 
   QUESTION (QuestionType,QuestionID,QuestionTitle) 
VALUES ('MRQ',
        'QNB5T6TKDMS',
        '<p><span style="font-family: comic sans ms,sans-serif; font-size: small;">
         what was the original concentration of the acid?</span></p>'
       );

You can also use escape slashes

edited Jun 26 '14 at 06:44

Charlesliam

1,253
3
18
36

answered Jun 26 '14 at 06:33

Techy

2,406
7
37
82

is it complusary to replace " with ' in insert statement – pallavi_ios Jun 26 '14 at 06:37
Yes.. You have to do that – Ullas Jun 26 '14 at 06:38
@pallavi_ios Did you get the solution – Techy Jun 26 '14 at 06:41

score 0 · Answer 2 · answered Jun 26 '14 at 06:37

Try somthiung like this:-

INSERT INTO QUESTION (QuestionType,QuestionID,QuestionTitle) VALUES 
('MRQ','QNB5T6TKDMS','<p><span style="font-family: comic sans ms,sans-serif; font-size: 
small;">what was the original concentration of the acid?</span></p>');

Hope this helps you.

Insert Query for HTML string in SQL

2 Answers2