Use PreparedStatement