Garry's Mod Wiki

sql.SQLStr

  string sql.SQLStr( string string, boolean bNoQuotes = false )

Description

Escapes dangerous characters and symbols from user input used in an SQLite SQL Query.

Do not use this function with external database engines such as MySQL. MySQL and SQLite use different escape sequences that are incompatible with each other! Escaping strings with inadequate functions is dangerous and will lead to SQL injection vulnerabilities.

Arguments

1 string string
The string to be escaped.
2 boolean bNoQuotes = false
Set this as true, and the function will not wrap the input string in apostrophes.

Returns

1 string
The escaped input.
OSZAR »