db_escape_string

• Drupal 4.6
• Drupal 4.7
• Drupal 5
• Drupal 6

Versions

4.6 – 6

db_escape_string($text)

Prepare user input for use in a database query, preventing SQL injection attacks. Note: This function requires PostgreSQL 7.2 or later.

Related topics

Database abstraction layer

Allow the use of different database servers using the same code base.

Code

includes/database.pgsql.inc, line 363

<?php
function db_escape_string($text) {
  return pg_escape_string($text);
}
?>

Login or register to post comments