Well, it looks like your 'chkstring' function is doubling up the quotes properly, that should work for the 'location' and 'description' fields. If you weren't doubling them you would get a SQL ...