I need to get data from a database where a few fields contain an ampersand. The data cannot be changed because they are legal names for corporations and so must display with the ampersand. The problem occurs where I have data such as "H & H Corporation" for example. The search variable is entered and validated on the first page, then put into a string variable and passed to the gridview page accessdatabase control. When I do a test query within the control, the sql statement pulls the correct records. But, when it displays in the grid, I get extra records, for instance, any other record that starts with a single "H" such as "H Wilson Construction" or "H & S Brothers". It appears to be the ampersand in the business name that is causing the problem. Also, as you can see from the code below, I have to use " like ? + '%' to even get any record with an ampersand in it to display.

Here is my control code on the gridview page:
    <asp:AccessDataSource ID="odbPIResults" runat="server" DataFile="~/App_Data/PInew.mdb"
            SelectCommand="SELECT CorpName FROM Pi WHERE (CorpName like ? + '%') ORDER BY CorpName">
            <SelectParameters>
                <asp:QueryStringParameter Name="CorpName" QueryStringField="CorpName" Type="String" />
            </SelectParameters>
     </asp:AccessDataSource>

Can anyone tell me how to deal with this problem? Is there a way to intercept the string variable when it leaves the first page and before it goes into the accessdatabase control? I think that is where the problem occurs since I can run a test query within the control that works correctly?

Your help would be GREATLY appreciated!!!

Thanks!

Hi there,

Your problem is rooted in the way URLs work. The ampersand character is used to separate query string variable. For example, if you look at this page, you'll see something like this:

http://p2p.wrox.com/post.asp?method=...2&FORUM_ID=212

The ampersand separates the querystring field TOPIC_ID from the FORUM_ID. In your case, you try to have something like this:

SomePage.aspx?CorpName=H & Wilsom

Basically, this gives you a querystring parameter of CorpNamewith a value of H and a querystring parameter of Wilsom without a value. So, when you execute the SELECT statement, you query for everything that starts with an H.

There are a few ways around this. Probably the easiest way is to avoid query strings. Is there a particular reason you're using a querysting? Can't you use a search field on the same page that displays the records?

If not, then you can escape the querystring using Server.UrlEncode. For example this:

Server.URLEncode("H & Wilson")

results in

H+%26+Wilson

When you pass this over the querystring, there's a fair chance your query will work.

Hope this helps,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.
Author of ASP.NET 2.0 Instant Results and Beginning Dreamweaver MX / MX 2004
While typing this post, I was listening to: Track 12 by Live (Track 12 from the album: Throwing Copper) What's This?