sql语句中出现字符型变量的引号问题

需要在外加双引号后还需在内家单引号，如下：

 string sql = "delete from keyan where xiangmu=' " + xiangmu.Text.ToString() + " ' ";

或：

 string sql = "insert into keyan values('" + xingming.Text.ToString() + "','" + xiangmu.Text.ToString() + "','" + jingfei.Text.ToString() + "','" + lunwen.Text.ToString() + "','" + zhuanli.Text.ToString() + "','"+zhuanzhu.Text.ToString()+"','"+huojiang.Text.ToString()+"','"+chengguo.Text.ToString()+"')";