Validation of non alphanumeric chars in a JavaBean method

Question

Hello people,
does anyone have any tips on writing a method for a Java Bean that can take in a String param and check to see if it contains chars such as ' or " (quatation or double-quotation marks).
I need to preferably be able to convert them to enable their insertion to an SQL statement, writing to a database, or to strip them out.
I'm sure a lot of you know the problems of inserting these types into SQL to write to a db....
I realise that Perl or perhaps Javascript could do this, but I want to use server-side Java.
Thanks
Mike

Answer 1

I want to be able to insert Strings such as: "the
coursework's mark was 90%" - including the '
(apostrophe), but SQL won't let you do that, I get an
error in the SQL query execution.That's funny, I can insert those characters directly into a MySQL database using JDBC and a PreparedStatement. The SQL I'm using let's me do precisely that, percent signs and apostrophes included... :)
String dataString = "the coursework's mark was 90%";
String sql = "INSERT INTO table (column1) VALUES (?)";
PreparedStatement ps = conn.prepareStatement(sql);
ps.setString(1, dataString);
ps.executeQuery; // inserts apostrophe and percent sign
                 // without a problem...