Dennis Gearon wrote:
Anyone know where to find documentation on this? Who knows what it escapes?


From PostgreSQL source (~/pgsql/src/interfaces/libpq/fe-exec.c):


8<--------------------------------------------------------------------
/* ---------------
 * Escaping arbitrary strings to get valid SQL strings/identifiers.
 *
 * Replaces "\\" with "\\\\" and "'" with "''".
 * length is the length of the buffer pointed to by
 * from.  The buffer at to must be at least 2*length + 1 characters
 * long.  A terminating NUL character is written.
 * ---------------
 */
size_t
PQescapeString(char *to, const char *from, size_t length)
8<--------------------------------------------------------------------

I presume the PHP function is just a wrapper around this one (but did not actually check).

HTH,

Joe




-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to