Hi friend,


Code to solve the problem :


import java.io.*;
import java.sql.*;

public class InsertRecords{
public static void main(String[] args) {
System.out.println("Insert records example using prepared statement!");
Connection con = null;
try{
Class.forName("com.mysql.jdbc.Driver");
con = DriverManager.getConnection("jdbc:mysql://localhost:3306/userdetails","root","root";);
try{
String str = "John's";
str = str.replace("'","\\'");

String sql = "INSERT employee (username)VALUES('"+str+"')";

System.out.println(sql + sql);

PreparedStatement prest = con.prepareStatement(sql);

int count = prest.executeUpdate();
System.out.println(count + "row(s) affected");
con.close();
}
catch (SQLException s){
System.out.println(s);
}
}
catch (Exception e){
e.printStackTrace();
}
}
}

Thanks

Hi,

In java also we can't use \ directly.. as we use \\ to get printed. So,

For SQL queires we have to give two single quotes like
My name is John's Peter ---> My name is John''s Peter....

So in your java class it self before executing the query add the following line.

ename= ename.replaceAll("'","''");