SqlEscape.cs

private static void SQLServerEscapeObject(object obj)
{
    foreach (System.Reflection.PropertyInfo property in obj.GetType().GetProperties())
    {
        try
        {
            if (property.PropertyType.FullName == "System.String" && property.GetValue(obj, null) != null)
            {
                property.SetValue(obj, property.GetValue(obj, null).ToString().Replace("'", "''"), null);
            }
        }
        catch (Exception e) { Logger.Log("Issue clensing SQL query: " + e.Message, Logger.Loglevel.Warning); }
    }
    return;
}