There is much easier way in VB. You can just apply replace function to string you want to pass to SQL, for example:

strText=replace(strText,"'","''")

Should work