Question: I'm using SQL Server 2005 with classic ASP and on a form repost (I post back to the same page), I replace each text field as follows:

```
course = trim(replace(request("course"),"'","''"))\

```

The problem with this is if I have to repost the form multiple times in case of validation errors, the tick marks I replace multiply.

Is there another way to safely vet the string fields without doing this kind of replace?

Answer: 
Only replace the `'` for use in the sql string. (*which you should better do with parameterized queries..*)
you can do this

course = trim(replace(request("course"),"'","&apos ;"))