SQL = "SELECT * FROM `cf_users` WHERE `email` = '" + txtEmail.Text + "' AND `password` = '" + txtPassword.Text + "'"

My question is it necessary 2 put a ' in the query cause im having a error if i will not include the ' sign in my sql query. . . .