[eluser]MRosenello[/eluser]
For MSSQL sepcifically, you would add another ' to it. So 'D'Andrea, First' would become 'D''Andrea, First'.
So for example to make this work you would have to do a str_replace("'","''",$dbRecord) before using that value in a where clause or insert value etc.
Hopefully this helps, as I just had the same issue last week.