How to trim single and double quotes in C# while uploading the files?

what is difference between normal sql insertion and parameters method insertion.

iN NORMAL sql  query why single qoutes(Special characters) are not accepted to save into database

yes, only for uploading quotes are not a problem.

But, here i am read the upload file data and stored in database field.

So the error generated



protected void cmdAdd_Click(object sender, EventArgs e)
  {
  //if (getoid() != "")
  //{
  string filename = string.Empty;
  int size1 = 0;
  int size = 0;
  string getval = string.Empty;
  for (int i = 1; i <= Convert.ToInt32(fuhid.Value); i++)
  {

  SqlConnection con = new SqlConnection(constring);
  con.Open();
  if (i == 1)
  {
  filename = FileUpload1.FileName;
  //string size=FileUpload1.FileBytes);//.ToString();
  size1 = FileUpload1.PostedFile.ContentLength;
  size = size1 / 1024;
  FileUpload1.SaveAs(Server.MapPath("uploads/" + filename));
  }
  if (i == 2)
  {
  filename = FileUpload2.FileName;
  //string size=FileUpload1.FileBytes);//.ToString();
  size1 = FileUpload2.PostedFile.ContentLength;
  size = size1 / 1024;
  FileUpload2.SaveAs(Server.MapPath("uploads/" + filename));
  }
  if (i == 3)
  {
  filename = FileUpload3.FileName;
  //string size=FileUpload1.FileBytes);//.ToString();
  size1 = FileUpload3.PostedFile.ContentLength;
  size = size1 / 1024;
  FileUpload3.SaveAs(Server.MapPath("uploads/" + filename));
  }
  string fname = Path.GetFileName(filename);
  //string myDateTime=demo1.Text;
  //DateTime myDateTime = DateTime.Parse(myDate);
  string query = string.Empty;
  //string res = DropDownList1.SelectedItem as string;
  string extn = Path.GetExtension(filename);
  string key = keyword1.Text;
  if (extn.Equals(".txt"))
  {
  TextReader tr = new StreamReader(Server.MapPath("uploads/" + filename));
  query = "INSERT INTO Fileupload([category],[subcategory],[uid],[oid],[up_name],[demo1],[keyword],[fdata],[aflag],sizebyte) VALUES('" + dropcategory.SelectedValue + "','" + DropDownList1.SelectedValue + "','" + Session["user_id"].ToString() + "','" + txtOwnerId.SelectedItem + "','" + fname + "','" + demo1.Text + "','" + key + "','" + tr.ReadToEnd().TrimEnd() + "',1,'" + size + "')  ";
  // create reader & open file
  }
  else if (extn.Equals(".doc"))
  {
  Microsoft.Office.Interop.Word.ApplicationClass oWordApp = new Microsoft.Office.Interop.Word.ApplicationClass();
  object fileName = Server.MapPath("uploads/" + filename);
  object readOnly = true;
  object isVisible = false;
  object missing = System.Reflection.Missing.Value;
  //Word.ApplicationClass oWordApp = new Word.ApplicationClass();

  Microsoft.Office.Interop.Word.Document oWordDoc = oWordApp.Documents.Open(ref fileName, ref missing, ref readOnly, ref missing, ref missing, ref missing, ref missing, ref missing, ref missing, ref missing, ref missing, ref isVisible, ref missing, ref missing, ref missing, ref missing);

  //oWordDoc.Activate();

  oWordDoc.ActiveWindow.Selection.WholeStory();

  oWordDoc.ActiveWindow.Selection.Copy();
  string txt = oWordDoc.Content.Text;
  query = "INSERT INTO Fileupload([category],[subcategory],[uid],[oid],[up_name],[demo1],[keyword],[fdata],[aflag],sizebyte) VALUES('" + dropcategory.SelectedValue + "','" + DropDownList1.SelectedValue + "','" + Session["user_id"].ToString() + "','" + txtOwnerId.SelectedItem + "','" + fname + "','" + demo1.Text + "','" + key + "','" + txt + "',1,'" + size + "')  ";
  }
SqlCommand cmd = new SqlCommand(query, con);

  cmd.ExecuteNonQuery();// ExecuteScalar().ToString();



  //}
  }

hi
Can you please share piece of code?
so we can help you.

As per my knowledge does matter files with single and double quotes.