Just use a prepared statement for inserting.