db_escape_string

string db_escape_string (string str)

Escapes a string so it is ready to be used as a SQL query. Specifically, this function will double single quotes (') or prepend a backslash (\) to them.

NOTE: This is a SQL function. See Database Support for more information.

Arguments

str is the string to be escaped.

Result

The function returns the escaped string.

Example

// Remove quotes from string

$item
= db_escape_string("That's all");
$res = db_query($item);

See also

Database functions
Database support