sql.SQLStr
From GMod Wiki
| Function | |
| Syntax |
sql.SQLStr( String str_in ) Where is this used? |
| Description: | |
| Attempts to make a string safe to pass to a database. | |
| Returns: | String |
| Part of Library: | Sql |
| Realm: |
 |
| BBCode Link: | [b][url=http://wiki.garrysmod.com/?title=Sql.SQLStr]Sql.SQLStr [img]http://wiki.garrysmod.com/favicon.ico[/img][/url][/b] |
Example
| Description | Makes sure there aren't any unescaped quotations before passing to sql.QueryValue |
|---|---|
| Used on | |
| Code | local query = "SELECT count(*) from ratings WHERE name = " .. sql.SQLStr( name ) sql.QueryValue( query ) |
| Output | N/A |
Additional Notes
- This should only be useful in cases where there's a risk of SQL injection, such as in client input.
- This function is also available as a global.
- See G.SQLStr for a more up-to-date description.
