internal static string SqlEscapeString(string value) { var sb = new StringBuilder(value.Length); foreach (char c in value) { if (c == '\'') { sb.Append("''"); } else { sb.Append(c); } } return sb.ToString(); }