如何在C#中使用包含引号的变量在SQL中插入语句？

using System;
using System.Data.SqlClient;

class Program
{
    static void Main()
    {
        string connectionString = "YourConnectionString";
        string variableWithQuotes = "John's Book";

        using (SqlConnection connection = new SqlConnection(connectionString))
        {
            connection.Open();

            string query = "INSERT INTO TableName (ColumnName) VALUES (@VariableWithQuotes)";
            using (SqlCommand command = new SqlCommand(query, connection))
            {
                command.Parameters.AddWithValue("@VariableWithQuotes", variableWithQuotes);
                command.ExecuteNonQuery();
            }
        }

        Console.WriteLine("Data inserted successfully.");
    }
}