[dbo].[QuoteString]

Property	Value
ANSI Nulls On
Quoted Identifier On

Name	Data Type	Max Length (Bytes)
@inSourceString	nvarchar(max)	max

Type	Action	Owning Principal
Grant	Execute	MssExec

SQL Script

/**
*
*    This function quotes a string of text and escapes any embedded
*    quote characters.
*
*    @param @inSourceString - The source nvarchar string.
*    returns - a quoted string with escaped embedded quotes.
*/

CREATE FUNCTION [dbo].[QuoteString] ( @inSourceString nvarchar(max) )
returns nvarchar(max)
as
begin
    declare @theNewString varchar(max)

    set @theNewString = concat( N'''', replace( @inSourceString, N'''', N'''''' ), N'''' )

    return @theNewString;
end
GO
GRANT EXECUTE ON  [dbo].[QuoteString] TO [MssExec]
GO