DB.escape3kaya
Escape a string to be used as part of a query
Usage
String escape( String val )
Arguments
val The String to escape
Overview
Escapes backslashes, apostrophes and quotes in a string to protect against SQL injection attacks. This function should be used only as a last resort - prepared statements using DB.prepare (3kaya) and DB.execPrepared (3kaya) are supported by all database libraries, and are far less prone to human error.
Releases
4 releases since Debian 5.0 (Lenny); the text changed 3 times.