[wango]

With Last_Name as "O'neill"
and the following code

int n = 0;
int m = 0;

n = First_Name.Find('\'');
m = Last_Name.Find('\'');

if(n > 0)
{
n = First_Name.Insert(n, "'");
}

if(m > 0)
{
m = Last_Name.Insert(m, "'");
}


strcpy((char *)SQLStmt_OP, "INSERT INTO myTable " );
strcat((char *)SQLStmt_OP, "VALUES (?, ?)");

(details left out on purpose)

I end up with "O''neill" in the SQL server database. How can I avoid that. Of course I added
another apostrophe to avoid error with those special characters in a strinf literal.