SQL Server is one of the best products to come out of Microsoft, but not every professional knows how to use it effectively. For example, some might find it difficult to create a stored procedure but ...
What you want to do is insert the data in the database with the ' replaced with '' . This escapes the apostrophe and won't mess up the query.