INSERT and UPDATE



In VB.net 2003 is there a way to create insert and/or update statements so
that if a string contains a ' or a " that it doesn't screw up the execution
of the statement?

any help would be greatly appreciated.


.