JDBC解决插入数据库时遇到的引号问题

public static String getSafeSQL(String inStr) {
String result = "";
try {
inStr = inStr.trim();
char c;
int strLen = inStr.length();
for (int i = 0; i < strLen; i++) {
c = inStr.charAt(i);
switch (c) {
case '/'':
result = result + "''";
break;
case '//':
result = result + "////";
break;
default:
result = result + String.valueOf(c);
break;
}
}
} catch (Exception e) {
return "";
}
return result;
}