Inserting special chars (such as ' or +) into an sql data

Question

When i am trying to insert  Select's!  into sql database table its throwing an exception... Incorrect syntax near 's'. Incorrect syntax near '!'. Unclosed quotation mark after the character string ');'. Please help me for the same.

Vishal Jadav · Answer

Hi Mufid You need to pass data using parameterizedquery to save data. insert into Table (col1col2) values (@col1Value@col@Value) 1st and better way is to use Stored Procedure pass the values in parameters and you wont get such errors. 2nd way is using C# code. Pass insert query in SqlCommand and then add Parameters to the SqlCommand object. It might help you. Thanks.