您可以使用参数(推荐)或使用“替换”来更正此问题。
& Replace(txtDescription,"'","''") &
参数
Dim cmd As New ADODB.commandcn.Open ServerConnectcmd.ActiveConnection = cnstSQL = "INSERT INTO Products (ProductName, " _ & "ProductDescription, ProductUnit, SupplierID) " _ & "Values (param1,param2,param3,param4)"cmd.CommandText = stSQLcmd.CommandType = adCmdTextWith cmd .Parameters.Append .CreateParameter( _ "param1", adInteger, adParamInput, , cboxItemNum) .Parameters.Append .CreateParameter( _ "param2", adVarChar, adParamInput, 50, txtDescription ) .Parameters.Append .CreateParameter( _ "param3", adInteger, adParamInput, , txtUnit ) .Parameters.Append .CreateParameter( _ "param4", adInteger, adParamInput, , linkPID )End withcmd.Execute recs
请注意,尽管我已将这些参数命名为param1到param4,但重要的是顺序,该顺序必须与参数的使用顺序匹配。



