title: How to escape " ' " in sql
body: <p>Hi I am searching for a name combination in database. I am passing the combination as follows</p>
  
  <pre><code>"firstName='" + firstName + "'", "middleName='" + middleName + "'", "lastName='" + lastName + "'"
  </code></pre>
  
  <p>This works fine. But the problem comes where there are some " ' " in names how can i rectify it? eg: Johns' or Jerry's etc causes exception</p>