private static string SqlEscape(object obj, string format) { if (obj == null) { return(null); } var value = ServerContext.GetString(obj, format); var builder = new StringBuilder(value.Length + 10); for (var i = 0; i < value.Length; i++) { switch (value[i]) { case '\'': builder.Append("''"); break; default: builder.Append(value[i]); break; } } return(builder.ToString()); }