Saving ' in database

Question

I have a description field. Need to allow to save ' in the description.
I have the following statements:
String str = "insert into table (Description) values (" +
"'" + desc + "')" ;
where desc is the value inputted by the user.
In case the user enters ' in the desc exampe test'description. I get an error. How do I allow to save the quote.

Answer 1

try this one:
     StringBuffer sb = new StringBuffer();
     PreparedStatement pre = null;                    
          sb.append("insert into table ");
          sb.append("(Description) values ( ?) ");
          pre = conn.prepareStatement(buf.toString());
          pre.setString(1, "'desc");               
          pre.executeUpdate() ;
or
     StringBuffer sb = new StringBuffer();
     PreparedStatement pre = null;                    
     sb.append("insert into table (Description) values ( ?) ");
     pre = conn.prepareStatement(buf.toString());
     pre.setString(1, "'desc");          
     pre.executeUpdate() ;
This should work. I usually follow the above style.