sqlite_escape_string

mIRC SQLite

sqlite_escape_string
Escapes a string for use as a query parameter.
Syntax
$sqlite_escape_string ( string )
Parameters
string
The string to escape.
Return Value
Escaped string.
Remarks
$sqlite_escape_string escapes the specific string so that it can be used safely in queries.
You should always call $sqlite_escape_string on user input to avoid SQL injection.
Example
var %str = $?="Input a string:"
var %sql = INSERT INTO table (value) VALUES (' $+ $sqlite_escape_string(%str) $+ ')
; %sql can now be safely executed