Passing a string containing special characters to database

Question

I am building a database in c# using visual studio. I am trying to pass a paragraph of text from the site into sql server database. However types of punctuation are being read as special characters such as ' or ". Would anyone be able to tell me how to replace these so that they will successfully pass into the database? Below is an example of my code.

DataAccess layer

5>>

Business Layer Logic

sw

and c# code behind page

nnoremap > :<C-u>exec 'set shiftwidth=4*'.v:count1<cr>>
nnoremap < :<C-u>exec 'set shiftwidth=4*'.v:count1<cr><
xnoremap > :<C-u>exec 'set shiftwidth=4*'.v:count1<cr>gv>
xnoremap < :<C-u>exec 'set shiftwidth=4*'.v:count1<cr>gv<

Any help would be greatly appreciated