Amir,
If you are using
JDBC, you could use a prepared statement. If you are using raw SQL directly to Oracle, you need to use an
escape character. This tells Oracle to use a special character (backslashes are common) to give the single quote special meaning.