This is driving me crazy with this one. Can someone help me out please.

Error:
Error Type:
Microsoft OLE DB Provider for ODBC Drivers (0x80040E14)
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression ''The 70's Show',ProfileFavouriteBook= '',ProfileFavouriteMusic= '',ProfileFavouritePlace= '',ProfileDisplayAge= 'y' where UserName = 'andrew''.


The Script I wrote:
IF Request.Form("DisplayAge" = "" THEN strShowAge = "n"
IF Request.Form("DisplayAge" = "y" THEN strShowAge = "y"

ProfileMaritalStatus = Request.Form("ProfileMaritalStatus"
ProfileAboutMe = Request.Form("ProfileAboutMe"
ProfileOccupation = Request.Form("ProfileOccupation"
ProfileFavouriteQuote = Request.Form("ProfileFavouriteQuote"
ProfileFavouriteMovie = Request.Form("ProfileFavouriteMovie"
ProfileFavouriteTVShow = Request.Form("ProfileFavouriteTVShow"
ProfileFavouriteBook = Request.Form("ProfileFavouriteBook"
ProfileFavouriteMusic = Request.Form("ProfileFavouriteMusic"
ProfileFavouritePlace = Request.Form("ProfileFavouritePlace"

sql = "Update Users Set "

sql = sql & "ProfileMaritalStatus= '" & ProfileMaritalStatus & "',"
sql = sql & "ProfileAboutMe= '" & ProfileAboutMe & "',"
sql = sql & "ProfileOccupation= '" & ProfileOccupation & "',"
sql = sql & "ProfileFavouriteQuote= '" & ProfileFavouriteQuote & "',"
sql = sql & "ProfileFavouriteMovie= '" & StrProfileFavouriteMovie & "',"
sql = sql & "ProfileFavouriteTVShow= '" & ProfileFavouriteTVShow & "',"
sql = sql & "ProfileFavouriteBook= '" & ProfileFavouriteBook & "',"
sql = sql & "ProfileFavouriteMusic= '" & ProfileFavouriteMusic & "',"
sql = sql & "ProfileFavouritePlace= '" & ProfileFavouritePlace & "',"
sql = sql & "ProfileDisplayAge= '" & strShowAge & "'"

sql = sql & " where "
sql = sql & "UserName = '" & Session("UserID" & "'"
Set Conn = Server.CreateObject("ADODB.Connection"
Conn.Open ConnOpenUsers
Conn.Execute sql
Conn.Close
Set RS = Nothing

CAN ANYONE HELP ME PLEASE!!!

Thank You.

Back Again... Everytime I put in a Apostrophe (The 70's Show) always comes up with an error.

Can anyone tell me the short cut to this.

Use on all inputs the following:

<pre id=code><font face=courier size=2 id=code>ProfileMaritalStatus = Replace(Request.Form("ProfileMaritalStatus", "'", "''"</font id=code></pre id=code>

When you don't escape the apostrophe users could use sql injection to read your database or even delete it.

--------------------------------------------------
Patrick Woldberg
Web Developer at Dynamic Zones
Administrator at DMXzone.com, FLzone.net, FWzone.net and DNzone.com
--------------------------------------------------

Thanks Patrick.
Yes I know that but I want to keep the Apostrophe when people sumit the form.

Cheers

' " ' "

It works... Thanks mate...