Certain characters create SQL Syntax error?

Question

I am trying to insert a string into a database that is written in a JTextArea, however if the string contains certain characters it causes a syntax error. Can anyone tell me what characters will create syntax errors? I assume a single quote will but what other characters should I be aware of? Is there anything I can do so I can keep the characters without getting syntax errors. I saw something called Regex that may help but I am unsure exactly how to use it and if it is the appropriate action. Any help would be appreciated. Thank you in advance.

Answer 1

Thanks for all the feedback. I have tried implementing a preparedstatement as follows:
String insertNew = "INSERT INTO MyMovies VALUES (?,?,?,?,?,?,?)";
                            PreparedStatement preStatement = databaseConnection.prepareStatement(insertNew);
                            preStatement.setString(1,addTitle);
                            preStatement.setString(2,addDescr);
                            preStatement.setInt(3,year);                       
                            preStatement.setString(4,addGenre);
                            preStatement.setString(5,addRating);
                            preStatement.setDouble(6,stars2);
                            preStatement.setInt(7,runtime);
                            preStatement.executeUpdate();
                            preStatement.close();But I get the error -- Number of query values and destination fields are not the same.
It sure looks like there the same. Am I missing something? I have looked over some material containing prepared statements and I seem to be doing what has been shown as examples.