title: Escaping values in SQL queries (C# with SQL connector)
body: <p>I know I can use the parameters, but what is the right way to escape string sequences?
  The query could be like this:</p>
  
  <pre><code>"INSERT INTO records (ReferenceID,Name,Note,Author) VALUES ('" + ID+ "','" + addlevel.textBox1.Text + "','"+addlevel.textBox2_note.Text+ "','"+Program.Username+"')";
  </code></pre>
  
  <p>I am ONLY curious, just want to know :)</p>
  
  <p>EDIT:
  But what about that?
  "CREATE TABLE "+string" .... parameters cannot be used here!</p>