Dynamic SQL lets you create a query string based off of user input. SQL Server allows you to create dynamic SQL statements. The statements use a SQL string varchar data type, then you execute the ...

What you want to do is insert the data in the database with the ' replaced with '' . This escapes the apostrophe and won't mess up the query.