SqlCommand cmd = new SqlCommand("insert into table (name,address,comment) values('" + txtname.text + "','" + txtaddress.text + "','"+txtcomment.text+"')", cnn);
txtcomment.Text.Replace("'", "''");
var
This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)