I have a description of a thing that need to be inserted into MySQL. A string can have any character like <'>, <\'>,<\'>:

```
    string=This \'is\' a string
    string=This is a' string
    string=This '\is\' a string

```

C# code:

```
   strDescerption=strDescerption.Trim(new char[] { '\'', '\\' }).Replace("'''", " ").Replace("''", "\"").Replace("'", @"\'").Replace(@"\\'", @"\'");

            MySqlCommand mySqlCommandThing = new MySqlCommand("", mySqlConnection);
            mySqlCommandThing.CommandText = "Insert into table (string) values ("+ strDescerption+")";
            int isInserted = mySqlCommandThing.ExecuteNonQuery();

```

If I use them like that I will get MySQL insert error. 
The above examples are the original string, and just adding backslash before ' cant solve the problem. What else can I do in order to preparing this string? I am using C# and MySQL.