Anyone know how to work with commas and apostrophes coming in as input from a form, and inserting this data into a record using SQL in ASP? If the user enters data with an apostrophe into a text ...

Injection prevention -- Never directly inject user-input into SQL statements. "Avoid inadvertent disclosure by capturing/describing database schema at design-time to allow for review/refinement," ...