Parsing a query that result in errors

See more:

C#2.0

C#3.0

C#

C#4.0

I'm writing a program to scan a folder for video files, parse it through the database, and then add it to the database if it dosn't exist. The following is the code to do the check.

foreach (string filename in openFileDialog.FileNames)
{
  if (dlg.FileName != "")
  {
    string FilePattern = "SELECT * FROM Table WHERE Path = \"" + filename + "\"";
    string FileExist = "NO";
    SqlCeConnection con;
    try
    {
      con = new SqlCeConnection();
      con.ConnectionString = "Data Source=" + DataDirectory + "\\FilePath.sdf";
      {
        con.Open();
        using (SqlCeCommand cmd = new SqlCeCommand(FilePattern, con))
        {
          using (SqlCeDataReader reader = cmd.ExecuteReader())
          {
            while (reader.Read())
            {
              FileExist = "YES";
              MessageBox.Show("Already exist");
            }
          }
        }
      }
    }
    catch (SqlException ex)
    {
      Console.Write(ex);
    }
    if (FileExist == "NO")
      Save(filename);
  }
}

Now the problem started when the filename had a single quote in it. It would simply not save the file because the single quote enables the SqlException. Is there a way to change the filename to allow filenames with (') in them to still run.