Module postgres_protocol::escape

source · [−]
Expand description

Provides functions for escaping literals and identifiers for use in SQL queries.

Prefer parameterized queries where possible. Do not escape parameters in a parameterized query.

Functions

escape_identifier

Escape an identifier and surround result with double quotes.

escape_literal

Escape a literal and surround result with single quotes. Not recommended in most cases.