sql.SQLStr
Description
Escapes dangerous characters and symbols from user input used in an SQLite SQL Query.
Do not use this function with external database engines such as
MySQL
. MySQL
and SQLite
use different escape sequences that are incompatible with each other! Escaping strings with inadequate functions is dangerous and will lead to SQL injection vulnerabilities.Arguments
2 boolean bNoQuotes = false
Set this as
true
, and the function will not wrap the input string in apostrophes.Returns
Page views: 26,343
Updated: Last Week
Updated: Last Week