jdbc中mySQL语句单双引号,在JDBC中使用MySql转义单引号

I have written code to store some headline's from news websites in a database. However the headlines also contain (') single quotes and double quotes from time to time and this causes an error when trying to insert it into the table.

What would be the best possible way to ge around this?

Here is my code:

Statement st = con.createStatement();

int val = st.executeUpdate("INSERT into imageinfo(imageurl,title,headline,website) VALUES('"+imageurl+"','"+title+"','"+headline+"','"+website+"')");

解决方案

You should consider using Prepared Statements where your SQL queries are precompiled. Depending on where your data is coming from in the first place this may also guard against SQL Injections.

Another advantage of using prepared statements is that you can reuse the same statement with different parameters each time you execute it.