Sql.SQLStr

From GMod Wiki

You do not have permission to edit this page, for the following reason:

You can view and copy the source of this page:

{{Lua_function | function_name = sql.SQLStr | arguments = {{Arg|String}} str_in | returns = {{Arg|String}} | description = Attempts to make a string safe to pass to a database. | library = {{Arg|Sql}} | lua_state = {{Serverside}} | }} == Example == {{Lua_example | description = Makes sure there aren't any unescaped quotations before passing to sql.QueryValue | useOn = {{Serverside}}| code = <lua>local query = "SELECT count(*) from ratings WHERE name = " .. sql.SQLStr( name ) sql.QueryValue( query )</lua>| }} ==Additional Notes== * This should only be useful in cases where there's a risk of SQL injection, such as in client input. * This function is also available as a global. * See [[G.SQLStr]] for a more up-to-date description. ==See Also== * {{Arg|Sql}} * [[G.SQLStr]] * SQLite Syntax [http://www.sqlite.org/lang.html]

Return to Sql.SQLStr.