title: SQL injection capturing on classic asp - reposting form puts in lots of ticks
body: <p>I'm using SQL Server 2005 with classic ASP and on a form repost (I post back to the same page), I replace each text field as follows:</p>
  
  <pre><code>course = trim(replace(request("course"),"'","''"))\
  </code></pre>
  
  <p>The problem with this is if I have to repost the form multiple times in case of validation errors, the tick marks I replace multiply.</p>
  
  <p>Is there another way to safely vet the string fields without doing this kind of replace?</p>