# Inserting dynamic string with astrophes to SQL Server

**URL:** <https://discourse.nodered.org/t/inserting-dynamic-string-with-astrophes-to-sql-server/59163>\
**Category:** General\
**Tags:** database\
**Created:** [1 March 2022 10:02 UTC](https://discourse.nodered.org/t/inserting-dynamic-string-with-astrophes-to-sql-server/59163 "2022-03-01T10:02:48Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [1 March 2022 13:22 UTC](https://discourse.nodered.org/t/inserting-dynamic-string-with-astrophes-to-sql-server/59163/6 "2022-03-01T13:22:52Z")

</div>

If you are using the MSSQL-PLUS node, simply use parameters. No escaping necessary & will avoid SQL injection possibilities.

E.g... [Dashboard and MS SQL database - number and text input nodes - #2 by Steve-Mcl](https://discourse.nodered.org/t/dashboard-and-ms-sql-database-number-and-text-input-nodes/55696/2)

---

_[View the full topic](https://discourse.nodered.org/t/inserting-dynamic-string-with-astrophes-to-sql-server/59163)._