pg_escape_identifier
pg_escape_identifier
Escape a identifier for insertion into a text field
string **pg_escape_identifier** PgSql\Connection $connection string $data
escapes a identifier
(e.g. table, field names) for querying the database. It returns an
escaped identifier string for PostgreSQL
server. adds double
quotes before and after data. Users should not add double
quotes. Use of this function is recommended for identifier
parameters in query. For SQL literals (i.e. parameters except
bytea),
or must be used. For bytea
type fields, must be used
instead.
pg_escape_identifier``pg_escape_identifier``pg_escape_literal``pg_escape_string``pg_escape_bytea
connection``data
A containing text to be escaped.
string
A containing the escaped data.
string
Voorbeeld: example
<?php
// Connect to the database
$dbconn = pg_connect('dbname=foo');
// Escape the table name data
$escaped = pg_escape_identifier($table_name);
// Select rows from $table_name
pg_query("SELECT * FROM {$escaped};");
?>
pg_escape_literal``pg_escape_bytea``pg_escape_string