I was trying to execute the below statement to escape single quotes (i.e. using two single quotes):
declare @year varchar(max)
set @year = \'111,11\';
exec (
declare @var1 varchar(100)
declare @var3 varchar(100)
declare @var4 varchar(100)
declare @var2 nvarchar(MAX)
set @var1 = ‘anil’
set @var4 = ‘1019518594’
set @var2 = N’select
a.*
from card b
join log a on a.Cust = b.ID
where a.c = ”’ + @var1 + ”’ and b.s =”’+ @var4 +””
print(@var2)
exec sp_executesql @var2