T-SQL escape quote character

Question

NOTE: It\'s probably a duplicate but I can\'t find working answer.

Following is what i\'m trying todo, notice a \' in the value. How do I fix this?

Answer 1

This will work:-

INSERT INTO [pugraider].[dbo].[Realms]([Name]) VALUES('Aman''Thul')

Ordinarily the only reason to have such hardcoded values in T-SQL is in DB construction code such as initialising look up tables.

Otherwise this code might be a result of string concatenation to build up some T-SQL from some input source. If that is the case its worth finding ways to avoid it since it can open your application to SQL injection attacks.