perhaps putting parameters in your query would help simplify
Parameterized Query | All About .NET
SQL Server would be like
insert into tblApps (colx, coly, colz) values (@x, @y, @z)
looks like mysql (based on that article i pasted) uses ?[value]
i would try that, as i see "+" in your query...