A good way to escape quotes in a database query string?

If it’s part of a Database query you should be able to use a Parameterized SQL Statement.

As well as escaping your quotes, this will deal with all special characters and will protect you from SQL injection attacks.

Leave a Comment