SQL update/insert for a string contain " ' "

Hi, all,

I am using JDBC to perform update/insert for DB2 on AS400.  The user types
inputs from a Java GUI. For example, when user types in "Tom's desk" in a
text field.  I will update the field with the typed string.  The partial
code is like this:

String desc = getJTextFieldDesc().getText();

String update = "update myTable set DESCRIPTION = '"+desc+"' where ID = 1";

stmt.createStatement();
stmt.executeUpdate(update);

The update will return error, since the string passed into SQL update
statement would be 'Tom's Desk'.  The SQL hit the first closing "  '  "
after letter m rather after letter k.

Any solutions?  Thanks for your help.