sql — quote strings for use in SQL statements, without referencing a specific database
The filter replaces single quotes ('
) with
two single quotes (''
). In addition, it
replaces each backslash (\
) with two backslashes
(\\
) to properly escape all content, but
backslash escaping can be turned off by setting the
pragma.
The filter is intended to be used on SQL strings.
For more information on Perl Regular Expressions, pattern matching and character classes, see perlre(1).
Interchange 5.9.0:
Source: code/Filter/sql.filter
Lines: 20
# Copyright 2002-2007 Interchange Development Group and others # Copyright 1996-2002 Red Hat, Inc. # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. See the LICENSE file for details. # # $Id: sql.filter,v 1.4 2007-03-30 23:40:45 pajamian Exp $ CodeDef sql Filter CodeDef sql Description SQL quoting, generic CodeDef sql Routine <<EOR sub { my $val = shift; $val =~ s:':'':g; $val =~ s:\\:\\\\:g unless $::Pragma->{filter_sql_no_backslash}; return $val; } EOR