Sqlite : Insert Text With Single Quote Got From A Sql Request

I have already check all the forums about this issue and I found a solution for my first insert, I used the 'double quoted' instead a single quote as follow: insertGiftShop(2,'pho

Solution 1:

Never ever put string values directly into an SQL string! This not only gives you formatting problems (as you have seen), but also allows SQL injection attacks.

Use parameters instead, then you don't need to escape quotes:

tx.executeSql("INSERT INTO MyTable(ID, Name, Description) VALUES(?,?,?)",
              [2, "photo02", "Modern City's skytrain"]);