如何转义SQL插入的单引号...当要插入的字符串在用户生成的变量中时

I am building an insert command to execute using jdbc. Part of it is to concatenate a user generated string...this all works until the user uses a string like this:I am building an insert command to execute usin