>Hi All,
>
>Currently I am writing a visual foxpro program to write data / record to sql server. However there is a problem when I failed to update the sql table when there is " ' " in the string. Example: update the "21' lcd monitor"

While Sergeys answer is technically correct and directly to your question,
using parameterized SQL is something you should read up on -
it eliminates security risks as well - you have heard of SQL injection ?.