Hi all,

My application uses the Sybase database, and to insert text with a single quote I've always escaped the quote by adding a second single quote. The second quote does NOT appear in the db, it's just an escape char so Sybase knows the first quote is part of the text and not part of the SQL statement. My problem is that I can't figure out how to escape a single quote when using hibernate. If I escape the text the way I do when writing directly to the db, both single quotes appear in the database. And if I just use one single quote the SQL statement does not execute correctly.

Any help would be greatly appreciated!

Thank you,
Rachel

Use parameter placeholders and let the JDBC driver do the escaping

Thanks so much for the speedy reply. I can't seem to find much documentation on parameter placeholders? Sorry, I am new to hibernate and trying to edit existing code. I assume this is something along the lines of a java PreparedStatement, using the "?" ... but I can't seem to find an example anywhere?

Thanks!
Rachel

Read the reference documentation, its called "parameter binding".

Please read the reference manual: http://www.hibernate.org/hib_docs/reference/en/html/manipulatingdata.html#manipulatingdata-querying

I read the documentatin you sent, and I can see how one could use parameter binding while querying the db. But what about when one saves or updates an object? The code I currently use goes like this:





It seems the available save and update functions only take an object and I don't see how I can specify any SQL in this instance? Sorry to be so dense.

that stuff should work since hibernate will use parameter binding on its own in this case...

There is of course no need to escape stuff manually on your object properties when you are just doing a .save() - Hibernate wil handle that, or rather the JDBC driver will.