Skip to main content

escape_sql_string

Function escape_sql_string 

Source
pub fn escape_sql_string(value: &str) -> String
Expand description

Escape single quotes in SQL string values to prevent SQL injection.

Uses PostgreSQL/SQL Server style escaping where single quotes are doubled.

ยงExamples

assert_eq!(escape_sql_string("O'Brien"), "O''Brien");
assert_eq!(escape_sql_string("test"), "test");