Brandon Aiken wrote:
You'll have to escape any quotation marks or your SQL will not parse your strings correctly.
And you have to do this for all your data, not just XML. Otherwise the first Mr. O'Malley you have a record for will break your application.
-- Richard Huxton Archonet Ltd