String sql = "INSERT INTO APP.tblname (tblID, fname) VALUES (1, blue)";

Is tblname a variable or the actual name of the table in the database? Either way use a PreparedStatement instead.