Add the following function to your page you can then call it to replace a
single quote with two single quotes you could also add more lines to the
function to replace any other characters
strSQL = "insert into TABLE ('" & description & "')"
something like this should work - just keep adding other values to the