sql injection escape single quote code example
Example 1: sql escape quote
DECLARE @my_table TABLE (
[value] VARCHAR(200)
)
INSERT INTO @my_table VALUES ('hi, my name''s tim.')
SELECT * FROM @my_table
Example 2: SQL Server escape single quote dynamic SQL
select 'that''s it'