title: how to add single quotation as a string in a query?
body: <p>I'm trying to get file destination path using a text box and pass it into the database.(Developing in Visual Studio)  When the query is running below error is displayed....</p>
  
  <p><a href="https://i.stack.imgur.com/0a04N.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/0a04N.png" alt="enter image description here"></a></p>
  
  <p>The method <code>updateClark</code> in the <code>user</code> class is shown below </p>
  
  <pre><code>public void updateClark(string _cid, string _path)
  {
      SqlCommand cmd = new SqlCommand(@"UPDATE tbl_Path SET folder_path='" + _path + "' WHERE clark_id='" + _cid + "'", ConnectionDB.connection());
      cmd.ExecuteNonQuery();
  }
  </code></pre>
  
  <p>What I missed in my code?</p>