C# 多条sql一起提交；处理特殊字符

C# 多条sql一起提交；处理特殊字符

 /// <summary>
            /// 添加商品 多条一起执行
            /// </summary>
            /// <param name="HJID"></param>
            /// <param name="SPBM"></param>
            /// <param name="CWBM"></param>
            /// <returns></returns>
            public int insertHJSPS(string HJID, string[] SPBM,string CWBM) 
            {
   
                string sql = "begin\r";
                sql += string.Join(";",SPBM.Select(item => "INSERT INTO WMS_HJSPDY (HJID,SPBM,MER_ID,ADD_TIME,LRR,CWBM) VALUES ('" + HJID + "','" + item + "','" + UserInfo._User.MER_ID + "',SysDate,'" + UserInfo._User