You need to actively search for these when the data is being submitted.
Before you submit it to the database you can replace a single ', with two
single quotes '' (note, this is not a double quote, but simply two single
quotes). The ' is a string terminator in SQL. Placing two together then
escapes the singlequote and lets SQL know that you are not terminating the
string but instead trying to input a singlequote.

Hope this helps,
Mark Fitzpatrick
Microsoft MVP - FrontPage

[quoted text, click to view]