[update request]problem with parameter value

[serge nzudie]

Hi all,
I would like to query for insertion into a MySQL database via java.
but when the value of this.name is sommething like <F'lick>, I get an error. How can I avoid?

My code :

try{
Statement stm= con.createStatement();

stm.executeUpdate("INSERT INTO tblclients(firstname) VALUES ('" + this.name + "');'");

}catch (Exception e) {
System.out.println(e.getMessage());
}

thanks,