ServerProvider.escapeString

Escapes str for use within an SQL command (to avoid SQL injection attacks). Note that the returned value still needs to be enclosed in single quotes before being used in an SQL statement.

class ServerProvider
string
escapeString

Parameters

cnc gda.connection.Connection

a #GdaConnection object, or null

str string

a string to escape

Return Value

Type: string

a new string suitable to use in SQL statements