title: How to escape string for SQL query (without prepared statement)
body: <p>I know the power of prepared statement, but I can't use it here. I send sql queries to external server via HTTP, not via JDBC.
  How to escape string for SQL query? There is way to do this via JDBC? or I should use custom class/function for this?</p>
  
  <p>p.s. Also I have connection to other DB, so I can use JDBC functions.</p>