Question

How can I check a string for incorrect MySQL syntax caused by (‘) ?

for example: We Bike’d fast

I need to get rid of the ‘ before inserting it into the Database.

Answer 1

The simple answer is:

textValue = textValue.Replace("'","''");

But it is usually better to use command parameters.

See SqlCommand.Parameters Property on msdn. (I do not know the MySql equivalent)

EDIT:

Example with Replace:

string sql = String.Format("SELECT * FROM tbl WHERE name ='{0}'",
                           textBox1.Value.Replace("'","''"));