Hello everyone,how can I avoid error in insert code when user insert data with ' symbol? here is a sample for my code: var insert_to = " Insert Into messages ( title, message )" + " values ( '"+title+"' ,'"+message+"' )"; conn.execute(insert_to); how can I avoid that? "I am useing asp with JavaScript <%@Language="JavaScript"%> not VBScript" thanks...