title: Avoiding SQL Injection
body: <p>I want to avoid SQL Injections in my Webapp.
  It's Java based.</p>
  
  <p>Are PreparedStatements enough?</p>
  
  <p>Do i have to filter out the ' and "? Are there already solutions for this in Java?</p>