TvDatabase.TvBusinessLayer.EscapeSQLString C# (CSharp) Method

    public string EscapeSQLString(string original)
    {
      string provider = ProviderFactory.GetDefaultProvider().Name.ToLowerInvariant();
      if (provider == "mysql")
      {
        return original.Replace("\\", "\\\\").Replace("'", "\\'");
      }
      else
      {
        return original.Replace("\\", "\\\\").Replace("'", "''");
      }
    }