2005/10/17, Dan Wilson <dwilson@...>:

> Is there a Firebird equivalent (or even the need for such?) to the mysql function mysql_escape_string? I am porting an application from mysql to firebird and have encountered this function call. It appears to me that the functionality included in this function is not needed in Firebird, since Firebird can handle newlines, etc. in sql strings without any problem. I thought I'd double-check with the experts, though, just to be sure.

The real problems are quotes inside of strings. They'd terminate the
string literal in the SQL
statement, although they might be part of the string.
Firebird has support for query parameters for such needs. Most
Firebird access libraries
handle them quite differently, so you'd need to check your library's
documentation.
For API-level access, read the API Guide, page 104,
Chapter "Method 3: Query statements with parameters"

Bye,
Daniel

--
eat(this); // delicious suicide