SQLite Forum

The characters to be escaped in Sqlite3 to prevent Sql Injection
Login
You can avoid all this by using prepared statements.