Android quotes within an sql query string
You should make use of the rawQuery
method's selectionArgs
parameter:
p_query = "select * from mytable where name_field = ?";
mDb.rawQuery(p_query, new String[] { uvalue });
This not only solves your quotes problem but also mitigates SQL Injection
.
DatabaseUtils.sqlEscapeString worked properly for me. The string is enclosed by single quotes and the single quotes inside the string become double quotes. Tried using selectionArgs in the getContentResolver().query() but it didn't work at all.
You should change
p_query = "select * from mytable where name_field = '" + uvalue + "'" ;
like
p_query = "select * from mytable where name_field = '" + android.database.DatabaseUtils.sqlEscapeString(uvalue)+ "'" ;
Have you tried replacing a single quote with 2 single quotes? That works for inputting data to a database.