Ars Technica

SQL query using a string with an apostrophe

What you want to do is insert the data in the database with the ' replaced with '' . This escapes the apostrophe and won't mess up the query.