Do you handle illegal characters in form entry?

Question

Hi everyone
I have an application with lot's of forms. The users are entering single and double quotes causing database errors. I would like to treat the single and double quote problem.
My questions are
1. How do you guys treat the single and double quote problem ?
2. are there any other characters that will cause java to break between form submission and database insert
Stephen

Answer 1

Hi Everyone thanks for the response.
I'm familiar with the preparedstatement solution -- however the problem is that sometimes i need to build dynamic insert statements. If i could insert nulls in the prepared statement i would be finished. so i tried that solution by liberticide i wasn't able to get it to work .
I tried to test it in a jsp page
I had the following errors:
empty character literal
probably occurred due to an error in /test/ReplaceQuotes.jsp line 13:
case ''': strB.append("\'");
empty character literal
probably occurred due to an error in /test/ReplaceQuotes.jsp line 13:
case ''': strB.append("\'");
unclosed character literal
probably occurred due to an error in /test/ReplaceQuotes.jsp line 13:
case ''': strB.append("\'");
: expected
probably occurred due to an error in /test/ReplaceQuotes.jsp line 13:
case ''': strB.append("\'");
Here is all the Code Below
<%@ page import "java.io.*, java.text.*, java.util.*" %>
<%@ page errorpage="JuvErrorPage.jsp"%>
<%! public String getBR(String mystring) {
StringBuffer strB = new StringBuffer();
int len = mystring.length();
char ch;
// start scan throught the string
for(int i=0; i <len; i++ )
ch = mystring.charAt(i);
switch(ch) {
case ''': strB.append("\'");
case '"': strB.append("\"");
default: strB.append(ch);
return strB.toString();
%>
any ideas ? ?