Question

I have an html string I would like to store in my SQLite db “as is”. The special characters in the html string prevent my INSERT statement from storing it:

INSERT INTO myTable VALUES ('" + htmlString + "')

On iOS I used parameterized queries to accomplish this and it worked fine. How can I accomplish this on Android? I’ve Google parameterized queries for Android but the results were varied and unclear.

Answer 1

in Android you have parameterized queries too … are few way to achive this:

ContentValues vals = new ContentValues();
vals.putString("ColumnName", htmlString);
db.insert("myTable", null, vals);

or

final SQLiteStatement insert = db.compileStatement("INSERT INTO myTable VALUES (?)");
insert.bindString(1, htmlString);
//edit: hehe forgot about most important thing 
insert.executeInsert(); 

or

db.rawQuery("INSERT INTO myTable VALUES (?)", new String[] {htmlString});

EDIT: (inserting multiple rows)

if you wana insert more than 1 row then do it in transaction (it should be quicker)
and prefer 2nd solution:

db.beginTransaction();
try {
  final SQLiteStatement insert = db.compileStatement("INSERT INTO myTable VALUES (?)");
  for(...){
    insert.clearBindings();
    insert.bindString(1, htmlString[N]);
    //edit: hehe forgot about most important thing 
    insert.executeInsert();
  }
  db.setTransactionSuccessful();
} finally {
  db.endTransaction();
}