foreach (string Items in listBox39.Items)
{
using (OracleCommand crtCommand = new OracleCommand(@"SELECT REGEXP_REPLACE ( REPLACE ( dbms_metadata.get_ddl ('PROCEDURE', '" + Items + @"'), '""" + txtSrcUserID.Text.ToUpper() + @""".'),'^\s+', NULL, 1, 0, 'm') FROM dual", conn1))
{
}
}
But as @SLaks suggested in his comment, better to use parameters: