C#中数据库插入记录问题

string In = "Insert into Student (xh,xm,sdept) values('";
In+=textBox1 .Text +"','";
In+=textBox2 .Text +"','";
In+=textBox3 .Text +"')";
这个写的有问题
string In = "Insert into Student (xh,xm,sdept) values(\'";
In+=textBox1 .Text +"\',\'";
In+=textBox2 .Text +"\',\'";
In+=textBox3 .Text +"\')";
应该这样写，'要转义的
Insert into Sutdent(xh, xm, sdept) values('1', '2', '3')
假设textbox1里面输入1，textbox2里面输入2，textbox3里面输入3

insert into Student(xh,xm,sdept) values(@xh,@xm,@sdept)

什么意思啊