You may have problems with characters such as ASCII STOP and non-printable characters, but if you use prepared instructions and parameter bindings, you will not have problems even with characters such as '.
If you do not want to use parameter bindings and prepared statements, you can replace all of your input 'with \', and everything will be fine.
SQL ' , . , . , . , "" , , SQL ' , '. , .
:
String sql = "INSERT INTO MYTABLE (NAME, EMP_NO, DATE_HIRED) VALUES (?, ?, ?)";
PreparedStatement ps = sqlite.prepareStatement(sql);
ps.setString(1, myString);
ps.setInt(2, myInt);
ps.setDate(3, myDate);
ps.executeUpdate();
, , sqlite Android, .