If you want to see what I'm talking about, go to Demonstration No. 12 and enter a string with a single quote.

Discovered this today (alomst a year later) - YIKES! No answer!

Hi JD,

I see that Chad's speaking with you via email. Please continue the conversation in the email. Thanks!

Candace

Ok, after reading Chad's email, the solution was:

1) Add a new "hidden" question to the form: ValComments

2) In the Comments question, add the following javascript:
$(ValComments) = encodeURIComponent(escape($(Comments)))

This code moves the SQL Safe / escaped text from the Comments field into the hidden ValComments field.

3) In the SQL Validation, use the ValComments field instead of the Comments field:
sp_EReviewValidation '$(Approval)', '$(ValComments)'

This resolved my problem. However, it would be nice if:
a) This solution were documented
or better:
b) The $(Comment) shortcut was automagically escaped

Thanks!

Hello JD Ready,

Thanks for following up and letting us know that this is working for you now. Thank you for your opinions and suggestions that I think might be suitable for enhancement ideas.

If you have any questions please let me know.

Thanks,

Ryan