Server.HTMLEncode method

Use this method any time you are writing database fields or form values, to ensure that any special characters ( < > & " ' ) are converted to HTML-safe (and XML-safe) character entities ( < > & " ' ).