I have a simple search mechanism on ms sql server that uses full-text "contains".
I pass search value as a parameter to contains predicate - directly from user's input (via asp.net web site). The problem is that i get sql exception in variety of cases: 
- when user inputs two words, like 'simple case'
- when user adds qoute to search value, like 'test"'

I have made test using query like below:

```
declare @val nvarchar(40)
set @val = N'test"' -- or 'simple case'

select x.* FROM xx as x
where CONTAINS(x.[name], @val)

```

Usually i get: "Syntax error near 'xxx' in the full-text search condition 'xxx'." The problem is that i would like to allow users to make advanced queries with '\*', 'or' and 'and' conditions. 

How do You handle user-input? 
Do You qoutename value?