Module postgres_protocol::escape

source ·
Expand description

Provides functions for escaping literals and identifiers for use in SQL queries.

Prefer parameterized queries where possible. Do not escape parameters in a parameterized query.

Functions

  • escape_identifier
    Escape an identifier and surround result with double quotes.
  • escape_literal
    Escape a literal and surround result with single quotes. Not recommended in most cases.