Insert Statement Will Not Work if a user has

Question

I am using a MySQL database to process my Java Server Page form.
Simply, I always try to see if I can process information, first, via the command line client, then thru JSP.
At the command line client I type:
I type insert into tablename (favorite_quote) VALUES
('Sleepin' in 'da house!');
That insert throws an error. SImply said, because of the bunches of single quotes... Is there any advanced statement or insert statement to solve this?
If I do this:
INSERT INTO tablename (favorite_quote) VALUES
('Java');
It adds the record perfectly normal...
I am REALLY new to Java, so any help on this issue would be great!
BTW: Part of my Java Server Pages has:
String favorite_quote =request.getParameter("favorite_quote");
"INSERT INTO tablename (favorite_quote) VALUES " +
"('"+userid+"')";
Obviously that works fine unless anybody adds a ' or " isn't or what's, etc.
I'm loving Java, I just REALLY need some help on solving this issue.
Thank you so much! Any help would BE **WONDERFUL**!

Answer 1

String favorite_quote
te =request.getParameter("favorite_quote");
PreparedStatement ps =
= connection.prepareStatement(""INSERT INTO tablename
(favorite_quote) VALUES (?)");
ps.setString(1, "Sleepin' in 'da house!");
ps.execute();oops a small error
PreparedStatement ps = connection.prepareStatement("INSERT INTO tablename (favorite_quote) VALUES (?)");