Use PreparedStatements rather then normal statements.