---
name: "DB.escape"
section: "3kaya"
platform: "linux"
package: "kaya"
version: "0.4.4-6.2"
release: "Debian 8 (Jessie)"
platforms: ["linux"]
url: "https://new.carta.tech/DB.escape"
---

# DB.escape(3kaya)

Escape a string to be used as part of a query

## NAME

DB::escape - Escape a string to be used as part of a query

## SYNOPSIS

**String escape(** *String val* **)**

## ARGUMENTS

**val** The String to escape

## DESCRIPTION

Escapes backslashes, apostrophes and quotes in a string to protect against SQL injection attacks. This function should be used only as a **last resort** - prepared statements using **DB.prepare (3kaya)** and **DB.execPrepared (3kaya)** are supported by all database libraries, and are far less prone to human error.

## AUTHORS

Kaya standard library by Edwin Brady, Chris Morris and others (kaya@kayalang.org). For further information see http://kayalang.org/

## LICENSE

The Kaya standard library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License (version 2.1 or any later version) as published by the Free Software Foundation.