Escaping characters in MySQLdb query

[Sean Berry]

I wrote a little script that is inserting thousands of records into a mysql
database.

How do I escape characters like ' in my insert statements?

I have something like the following (much shorter) example:

c.execute("INSERT INTO records (var1, var2) values ('%s', '%s')"   %(value1,
value2))

My problem is when value1 is something like "Tom's auto supply".  The ' in
Tom's needs to be escaped.  How can I do this?

Thanks.