3 ms·

If you're "escaping" anything you've already lost: all of your queries should be parameterised, not escaped.

• davesque 12y ago
  Yes, what this guy said.
• emidln 12y ago
  What database do you use that supports parameterized table names? Edit: see also, ORDER BY field names