Connection::escapeField

public Connection::escapeField($field)

Escapes a field name string.

Force all field names to be strictly alphanumeric-plus-underscore. For some database drivers, it may also wrap the field name in database-specific escape characters.

Parameters

string $field: An unsanitized field name.

Return value

string The sanitized field name.

File

core/lib/Drupal/Core/Database/Connection.php, line 961

Class

Connection

Base Database API class.

Namespace

Drupal\Core\Database

Code

public function escapeField($field) {
  return preg_replace('/[^A-Za-z0-9_.]+/', '', $field);
}