Using placeholders might help.

Some RDBMS don't like double quotes inside of character strings, so your way might be the only one.

Give us some more information about the database and the error messages and show us a piece of code.