Dynamic SQL problem in Store Procedure

[Mark Rouse]

I have the following code in a stored procedure:

set @s= concat('SELECT ID, replace(replace(field_a,''*'',''''),''\''',''\\'''')
FROM table where field_b = ',vVariable,'');

prepare stmt from @s;
execute stmt;
deallocate prepare stmt;

I'm getting syntax errors around the second replace. I want to find single quote characters in field_a and replace them were they occur with \'.

I think I've not got enough single quote marks but have tried many variations in the number of quote marks surrounding my find and replace patterns, but still get the syntax error.