Hey folks,

I have been updating a datbase using request.form in my SQL statements. I ran into a problem when the user entered info is something like "Today's special is chicken" cause the SQL statement is run through it thinks that the "'" in Today's is the end of the string which of course its not. How do I deal with this?

Here is an example

User Enters:

Today's Special

SQL statement becomes:

'Today's Special'

how do I work around this?