The recommendations I have come across advise that single quotes in SQL Server should be escaped using two single quotes. Thus Ravi's becomes Ravi''s.
Another alternative is to use parameters.
In most of the examples I have seen the words usually have only one quote. Most times it works but I have been unable to make it work while creating a database login.
CREATE LOGIN Ng''ang''a WITH PASSWORD 'Ng''0ng''0'
Where I am going wrong?