How do I deal with quotes ' in SQL [duplicate]

Answer 1

Parameterized queries are your friend, as suggested by Matt.

Command = SELECT * FROM PEOPLE WHERE SURNAME=?

They will protect you from headaches involved with

• Strings with quotes
• Querying using dates
• SQL Injection