Android sqlite执行insert，英文单引号报错问题的解决

最近在做下载m3u8视频下载方面，发现往Sqlite中插入下载记录后，下载进度始终为0，通过Log分析发现往Sqlite中插入视频名称中存在英文单引号，解决办法是把英文单引号转换成中文单引号，希望给遇到同样问题的朋友一些帮助。

一：使用ORMLite单引号处理方法

1、问题描述：

E/SQLiteLog(13416):<strong> <span style="color:#ff0000;">(1) near "s": syntax error</span></strong>
E/SQLiteLog(13416): (257) Record real error code: 1
E/SQLiteLog(13416): (257) Record real error code: 1
W/System.err(13416): java.sql.SQLException: Problems executing runUpdate Android statement: UPDATE `t_m3u8_download_list` SET `<strong><span style="color:#ff0000;">movie_name` = 'It's Yo'</span></strong> ,`total_duration` = 296 ,`total_size` = 0 ,`downloaded_duration` = 296 ,`download_state` = 'DONE' ,`movie_name` = 'It's Yo' WHERE `_id` = 322
W/System.err(13416):    at com.j256.ormlite.misc.SqlExceptionUtil.create(SqlExceptionUtil.java:22)
W/System.err(13416):    at com.j256.ormlite.android.AndroidCompiledStatement.execSql(AndroidCompiledStatement.java:203)
W/System.err(13416):    at com.j256.ormlite.android.AndroidCompiledStatement.runUpdate(AndroidCompiledStatement.java:78)
W/System.err(13416):    at com.j256.ormlite.stmt.StatementExecutor.update(StatementExecutor.java:480)
W/System.err(13416):    at com.j256.ormlite.dao.BaseDaoImpl.update(BaseDaoImpl.java:378)
W/System.err(13416):    at com.j256.ormlite.stmt.UpdateBuilder.update(UpdateBuilder.java:117)
W/System.err(13416):    at com.bobo.downloadframework.m3u8download.M3u8DownloadDAO.updateByMovieId(M3u8DownloadDAO.java:113)
W/System.err(13416):    at com.bobo.downloadframework.m3u8download.M3u8DownloadTask.executeDownload(M3u8DownloadTask.java:257)
W/System.err(13416):    at com.bobo.downloadframework.m3u8download.M3u8DownloadTask.doInBackground(M3u8DownloadTask.java:72)
W/System.err(13416):    at com.bobo.downloadframework.m3u8download.M3u8DownloadTask.doInBackground(M3u8DownloadTask.java:1)
W/System.err(13416):    at android.os.AsyncTask$2.call(AsyncTask.java:287)
W/System.err(13416):    at java.util.concurrent.FutureTask.run(FutureTask.java:234)
W/System.err(13416):    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1080)
W/System.err(13416):    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:573)
W/System.err(13416):    at java.lang.Thread.run(Thread.java:838)
W/System.err(13416): Caused by: android.database.sqlite.SQLiteException: near "s": syntax error (code 1): , while compiling: UPDATE `t_m3u8_download_list` SET `movie_name` = 'It's Yo' ,`total_duration` = 296 ,`total_size` = 0 ,`downloaded_duration` = 296 ,`download_state` = 'DONE' ,`movie_name` = 'It's Yo' WHERE `_id` = 322
W/System.err(13416):    at android.database.sqlite.SQLiteConnection.nativePrepareStatement(Native Method)
W/System.err(13416):    at android.database.sqlite.SQLiteConnection.acquirePreparedStatement(SQLiteConnection.java:886)
W/System.err(13416):    at android.database.sqlite.SQLiteConnection.prepare(SQLiteConnection.java:497)
W/System.err(13416):    at android.database.sqlite.SQLiteSession.prepare(SQLiteSession.java:588)
W/System.err(13416):    at android.database.sqlite.SQLiteProgram.<init>(SQLiteProgram.java:58)
W/System.err(13416):    at android.database.sqlite.SQLiteStatement.<init>(SQLiteStatement.java:31)
W/System.err(13416):    at android.database.sqlite.SQLiteDatabase.executeSql(SQLiteDatabase.java:1663)
W/System.err(13416):    at android.database.sqlite.SQLiteDatabase.execSQL(SQLiteDatabase.java:1644)
W/System.err(13416):    at com.j256.ormlite.android.AndroidCompiledStatement.execSql(AndroidCompiledStatement.java:201)
W/System.err(13416):    ... 13 more

2、分析：

根据 1) near "s": syntax error 提示s附近有语法错误，仔细观察发现是因为It's Yo中包含英文单引号

3、解决方法：

将英文单引号转换为中文单引号

  String regexp = "\'";String.replaceAll(regexp, "‘")

二：未使用ORMLite单引号处理方法

1、问题描述：

SQLiteDatabase mDB = this.getWritableDatabase();
String insertStr = "insert into mTable(id,name,age,phone) values(1,'iOcean's','80','110')";
mDB.execSQL(insertStr);

注：数据可能是server拿来的数据，为说明问题此处临时写死的。
当执行该代码时后台就会报异常如下：
insert Exception:android.database.sqlite.SQLiteException: near "s": syntax error: insert into mTable(id,name,age,phone) values(1,'iOcean's','80','110')
很明显，是因为单引号引起的

2、解决方法：

先是考虑的可不可以手动转义后insert，但是简单的使用String的replace方法不行，仍会报错
str.replace("'", "\\\\'");就算这种方法可行，但是引起问题的还有可能是其他字符，所以这种思路比较麻烦。那就换换喽^_^
后来查资料发现，SQLiteDatabase类的execSQL方法有两个，上面是其一execSQL (String sql)，而另一个为execSQL (String sql, Object[] bindArgs)
而该方法支持使用占位符参数(?)，所以试试喽，结果该方法对特殊字符通吃，嘛4么有，呵呵~

所以代码可以这样了：

SQLiteDatabase mDB = this.getWritableDatabase();
String insertStr = "insert into mTable(id,name,age,phone) values(?,?,?,?)";
Object[] mValue = new Object[]{1,"iOcean's","80","110");
mDB.execSQL(insertStr, mValue);