Kaya 0.5.2 reference for DB::escape

List of functions and data types in DB

String escape(String val)

Arguments

Usage

Escapes backslashes, apostrophes and quotes in a string to protect against SQL injection attacks. This function should be used only as a last resort - prepared statements using prepare and execPrepared are supported by all database libraries, and are far less prone to human error.

This function will escape Tainted strings, returning an untainted string.

Related

kaya@kayalang.org | Last modified 13 July 2009 | Supported by Durham CompSoc | Powered by Kaya