The best answer is: use bind variables. Bind variable are SO important.

You would prepare (in whatever language you are using) a statement like:

insert into xyz (c1, c2) values ( :c1, :c2 );


You would execute this statement over and over with different BIND values. Now, you don't have to compile the statement each time, we use shared sql, and your program runs inserts maybe 10 times faster.....

If you tell me your language, I can probably find an example of binding for you.


If you don't like that advice (and believe -- its really IMPORTANT to use bind variables), you can:

insert into xyz (c1, c2 ) values ( 1023, 'O''Brian' );

2 quotes = 1 quote in a quoted string.