Coding Cookbook/SQL Encode

Encode various datatypes for safe usage in SQL commands.

VBScript solution
function SQLEncode (vInput) dim CurrentLocale select case VarType(vInput) case 0,1 ' empty, null SQLEncode = "NULL" case 2,3 ' integer, longint SQLEncode = vInput case 4,5 ' single, double CurrentLocale = GetLocale SetLocale ("en-us") SQLEncode = CStr(vInput) SetLocale (CurrentLocale) case 7   ' date SQLEncode = "#" & _ DatePart("yyyy", vInput) & "-" & _ DatePart("m",   vInput) & "-" & _ DatePart("d",   vInput) & " " & _ DatePart("h",   vInput) & ":" & _ DatePart("n",   vInput) & ":" & _ DatePart("s",   vInput) & "#" case 8   ' string SQLEncode = vInput SQLEncode = Replace (SQLEncode, chr(0), "") SQLEncode = Replace (SQLEncode, "'", "''") SQLEncode = "'" & SQLEncode & "'" end select

end function