Connection con = null;
        try
        {
            String sql = "";
            PreparedStatement pstmt = con.prepareStatement(sql);
            pstmt.setString(1, "你的参数");
            pstmt.executeUpdate();
            pstmt.close();
        }catch(Exception e)
        {
            try {
                con.rollback();
            } catch (SQLException e1) {
                // TODO Auto-generated catch block
                e1.printStackTrace();
            }
            e.printStackTrace();
        }
        finally
        {
            if(con != null)
            {
                try {
                    con.close();
                } catch (SQLException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
                }
            }
        }

------解决方案--------------------
探讨

我用的是prepareStatement  
con.prepareStatement(sql);  
朋友们的意思是不是我在得到这个值的时候就把单引号替换成双引号进去  

CUSTNAME = '"  
+ customers[i].getCustname() + "'  

也就是在customers[i].getCustname() 就把有单引号的替换成双引号，这样就能把有单引号的数据存入到oracle中了？？？  


------解决方案--------------------
Java code

public static String getSafeSQL(String inStr) {

        String result = "";

        try {

            inStr = inStr.trim();

            char c;
            int strLen = inStr.length();
            for (int i = 0; i < strLen; i++) {

                c = inStr.charAt(i);

                switch (c) {
                case '\'':
                    result = result + "''";
                    break;
                case '\\': 
                    result = result + "\\\\";
                    break;
                default:
                    result = result + String.valueOf(c);
                    break;
                }

            }

        } catch (Exception e) {
            return "";
        }

        return result;

    }