Hint: Input a single quote 1' to force a syntax error and get a SQLITE_ERROR. That means the app is vulnerable and you can map out internal structure by breaking its queries.
1'