Erm... if the server-side was already escaping properly then there would be no way for users to mess with the database. Only if it is not escaping properly is t

Erm... if the server-side was already escaping properly then there would be no way for users to mess with the database. Only if it is not escaping properly is this code vaguely useful. It's not like you can't store semi-colons in an SQL database :)