pg_escape_string

Escape a string for query

&reftitle.description; `string` `pg_escape_string` `PgSql\Connection` `connection` `string` `data`

`pg_escape_string` escapes a string for querying the database. It returns an escaped string in the PostgreSQL format without quotes. `pg_escape_literal` is more preferred way to escape SQL parameters for PostgreSQL. `addslashes` must not be used with PostgreSQL. If the type of the column is bytea, `pg_escape_bytea` must be used instead. `pg_escape_identifier` must be used to escape identifiers (e.g. table names, field names)

This function requires PostgreSQL 7.2 or later.

&reftitle.parameters;

`connection`

- &pgsql.parameter.connection-with-unspecified-default;

`data`

- A `string` containing text to be escaped.

&reftitle.returnvalues;

A `string` containing the escaped data.

&reftitle.changelog;

&Version; | &Description;
&pgsql.changelog.connection-object;

&reftitle.examples;

### `pg_escape_string` example

    <?php
      // Connect to the database
      $dbconn = pg_connect('dbname=foo');

      // Read in a text file (containing apostrophes and backslashes)
      $data = file_get_contents('letter.txt');

      // Escape the text data
      $escaped = pg_escape_string($data);

      // Insert it into the database
      pg_query("INSERT INTO correspondence (name, data) VALUES ('My letter', '{$escaped}')");
    ?>

&reftitle.seealso;

- `pg_escape_bytea`