Hi! is it okay to use replace...for example replace(textbox1.text,"'","''")... Am i still vulnerable with sql injection? ...