Java & MySql - How to escape query before execute it
I'm using Java for a web application, and I'm working with a MySql database. I need to escape the query before execute it. This is my actual code :

    db_result=mydb.selectQuery("SELECT nickname FROM users WHERE nickname='"+log_check_user+"' AND password='"+log_check_pass+"'");

    public Vector selectQuery(String query) {
      Vector v = null;
      String [] record;
      int colonne = 0;
      try {
         Statement stmt = db.createStatement();
         ResultSet rs = stmt.executeQuery(query);
         v = new Vector();
         ResultSetMetaData rsmd = rs.getMetaData();
         colonne = rsmd.getColumnCount();

         while(rs.next()) {
            record = new String[colonne];
            for (int i=0; i<colonne; i++) record[i] = rs.getString(i+1);
            v.add( (String[]) record.clone() );
         }
         rs.close();
         stmt.close();
      } catch (Exception e) { e.printStackTrace(); errore = e.getMessage(); }

      return v;
   }

I need this, as you can believe, to avoid the SQL Injection problem! How can I do it?
Java & MySql - How to escape query before execute it
===

I'm using Java for a web application, and I'm working with a MySql database. I need to escape the query before execute it. This is my actual code :

    db_result=mydb.selectQuery("SELECT nickname FROM users WHERE nickname='"+log_check_user+"' AND password='"+log_check_pass+"'");

    public Vector selectQuery(String query) {
      Vector v = null;
      String [] record;
      int colonne = 0;
      try {
         Statement stmt = db.createStatement();
         ResultSet rs = stmt.executeQuery(query);
         v = new Vector();
         ResultSetMetaData rsmd = rs.getMetaData();
         colonne = rsmd.getColumnCount();

         while(rs.next()) {
            record = new String[colonne];
            for (int i=0; i<colonne; i++) record[i] = rs.getString(i+1);
            v.add( (String[]) record.clone() );
         }
         rs.close();
         stmt.close();
      } catch (Exception e) { e.printStackTrace(); errore = e.getMessage(); }

      return v;
   }

I need this, as you can believe, to avoid the SQL Injection problem! How can I do it?