Escaping ' For Sql Statement (should Be Really Easy But Its Not Working)

     
 
 
myCommand2.CommandText = "INSERT INTO testimonials(name,email,testimonial,approved,time) VALUES ('" + exp.escString(txtName.Text) + "','" + exp.escString(txtEmail.Text) + "','"  +    txtTestimonial.Text + "','" + false + "','" + DateTime.Now + "')";
 
ok the form has a field txtTestimonial.Text 
these strings work when i submit them though
thats all folks
that"s  (double quotes)

 that\"s
that\"s 
 
 
these fail
that's  
that's 

that\'s

that\'s

 tried up to 7 just to make sure

Exception Details: System.Data.SqlClient.SqlException: Incorrect syntax near 's'.
Unclosed quotation mark after the character string ')'.
 I figure the " works because it ends up being ' " ' in the sql statement and it doesnt mind that

I tried researching this. I could not find any info stating that perhaps sql escapes things differently. I was on the assumption that in the sql itself the database would reconise the before the '.
I read i can use html decode but it seems that then i will have to undecode everytime I read from the database and it could be a major pain if I am using a datagrid or something and a big mess.
 
Any help would be greatly appreciated.
 
Jim