在C＃中转义SQL查询

Question

I have a program that runs queries on a sqlite db and I want to replace any ' character in my query with ''.

The code I am using:

val.Value.Replace(',' '\\'\\ ')

But my vs doesnt accept that, is there a different method?

Answer 1

string val = "' ' d '";
val = val.Replace("'", "\"");
Console.WriteLine(val);

I just show how to do it with a test string. Instead of using ', use ".

Answer 2

下面的代码使用引号（“）封装Replace语句的两个参数。在这种情况下，第一个参数是单引号（'），第二个参数是两个单引号（'）。这导致下面的代码。

val.Replace("'","''")