title: Can not insert data with ( ' ) in data base e.g: Loop'D is not inserted
body: <p>When I write the data in text box with a single colon <code>'</code> in  text, query shows an following error:</p>
  
  <blockquote>
    <p>Incorrect syntax near 'd'. Unclosed quotation mark after the character string ', ',',',')'.</p>
  </blockquote>
  
  <pre><code>    protected void btnAdd_Click(object sender, EventArgs e)
      {
          string pic = "";
          if (fuPic1.HasFile)
          {
              string fPath1 = Server.MapPath("~/BlogPics/");
              fuPic1.SaveAs(fPath1 + fuPic1.FileName);
              pic = "~/BlogPics/" + fuPic1.FileName;
  
          }
          else
          {
              pic = "";
          }
  
          string pic1 = "";
          if (fuPic2.HasFile)
          {
              string fPath2 = Server.MapPath("~/BlogPics/");
              fuPic2.SaveAs(fPath2 + fuPic2.FileName);
              pic1 = "~/BlogPics/" + fuPic2.FileName;
  
          }
          else
          {
              pic1 = "";
          }
          SqlConnection con = new SqlConnection("Data Source=Saad_Zahid ;  Database=DJ ; Integrated Security=True; ");
          string query = "insert into Blog(Blog_Banner,Blog_Title,Blog_Para1,Blog_SubTitle,Blog_Para2,Blog_Img) values('" + pic + "','" + txtTitle.Text + "', '" + txtA1.InnerText + "','" + txtSTitle.Text + "','" + txtA2.InnerText + "','" + pic1 + "')";
          SqlCommand cmd = new SqlCommand(query, con);
          con.Open();
          cmd.ExecuteNonQuery();
          con.Close();
          img1.ImageUrl = pic;
          img2.ImageUrl = pic1;
          ScriptManager.RegisterStartupScript(this, this.GetType(), "alert", "alert('Blog Added');window.location ='AIndex.aspx';", true);
  
      }
    }
  }
  </code></pre>