title: Equivalent of php's mysql_real_escape_string
body: <p>I have a need for some dynamic SQL to INSERT a large number of values into a database.  </p>
  
  <pre><code>INSERT INTO table1 (a,b,c,d) VALUES (1,2,3,'string with possible quotes'),....
  </code></pre>
  
  <p>Because I want to insert about a 1,000 rows per batch, parameters are not really an option.<br>
  In php I'd use the <code>mysql_</code> lib and <code>mysql_real_escape_string</code> to prevent errors and SQL-injections.   </p>
  
  <p>How do I escape the string values in Delphi?  </p>