Regexp help, tough problem

Ok, I need to parse a WHERE clause being passed into a function. The string containing it could be something like..

where = "username = 'test', password = 'somehash', email = 'this@that.theother.thing'"

I have addslashes/stripslashes that I wrote to make my SQL strings safe from fishy user input. The problem is, I dont' wanna rewrite these functions. I've managed to get a regexp to grab the values from inside the single quotes and escape them, but reassembling the whole string has proven not so simple.

This is in visual basic 6, btw, using vbscript regexp library 5.0

I can't come up with any reliable way to keep users from entering ', and closing the statement, SO i'm going to just rewrite these functions =(