Login Register

Db\Adapter\Pdo::escapeString

public escapeString (mixed $str)

Escapes a value to avoid SQL injections according to the active charset in the connection

$escapedStr = $connection->escapeString('some dangerous value');

Links:

https://docs.phalconphp.com/en/latest/api/Phalcon_Db_Adapter_Pdo.html#escapestring

doc_Phalcon

2016-10-16 09:49:06

Comments

Leave a Comment

Please login to continue.

Popular Articles

Db\Adapter\Pdo extends abstract class Phalcon\Db\Adapter implements Phalcon\Events\EventsAwareInterface Source on GitHub Phalcon\Db\Adapter\Pdo is the Phalcon\Db th

Db\Adapter\Pdo::prepare public prepare (mixed $sqlStatement) Returns a PDO prepared statement to be executed with ‘executePrepared’ use Phalcon\Db\Column; $statement = $db

Db\Adapter\Pdo::lastInsertId public int | boolean lastInsertId ([string $sequenceName]) Returns the insert id for the auto_increment/serial column inserted in the lastest execute

Db\Adapter\Pdo\Mysql extends abstract class Phalcon\Db\Adapter\Pdo implements Phalcon\Events\EventsAwareInterface, Phalcon\Db\AdapterInterface Source on GitHub Specific f

Db\Adapter\Pdo::query public query (mixed $sqlStatement, [mixed $bindParams], [mixed $bindTypes]) Sends SQL statements to the database server returning the success state.