ReplaceString questions..

KaOs · **Author**

Hello,
Does anyone know how escapes work with this function? I'm running an SQL query and I need to escape single quotes in a players name.. but I'm not sure if I need to double escape it to compensate for the function itself.

For example.. will this do what I need:
blah = "Quote: ' "
ReplaceString(blah, 25, "'", "\'");
// blah = Quote: \'

OR do I need to:
blah = "Quote: ' "
ReplaceString(blah, 25, "'", "\\'");
// blah = Quote: \'

Anyone? Sorry if im a little complicated lol

Nican · 02-08-2008 , 15:55 Re: ReplaceString questions..

The second one would be correct...

You might want to take a look at this function: SQL_QuoteString

BAILOPAN · 02-08-2008 , 22:47 Re: ReplaceString questions..

Indeed, you should use the provided API call rather than trying to guess at the best replacement tactic.

KaOs · 02-08-2008 , 23:13 Re: ReplaceString questions..

Quote:

Originally Posted by BAILOPAN

Indeed, you should use the provided API call rather than trying to guess at the best replacement tactic.

Well again, vague description is killing me..

Quote:

Quotes a database string for literal insertion. This is not needed for binding strings in prepared statements.

Says it's going to QUOTE a string.. I need to escape quotes in a string.. see what I mean? I never would have guessed.

BAILOPAN · 02-09-2008 , 01:07 Re: ReplaceString questions..

Indeed, you're right, the function should have been called SQL_EscapeString(). In fact I don't know why I called it that.

If you file a bug report I'll rename it.

KaOs · 02-09-2008 , 13:38 Re: ReplaceString questions..

Quote:

Originally Posted by BAILOPAN

Indeed, you're right, the function should have been called SQL_EscapeString(). In fact I don't know why I called it that.

If you file a bug report I'll rename it.

Will do, thanks bailo.

bl4nk · 02-09-2008 , 23:05 Re: ReplaceString questions..

I think I've run into a similar situation as to what KaOs just described. I want to insert a string into a DB that has (single and/or double) quotes in it. Would I use that function to modify the string before I insert it, or would I need to do it via ReplaceString() as mentioned in the OP?

Nican · 02-09-2008 , 23:39 Re: ReplaceString questions..

Use that function to format the string before you run the query.

bl4nk · *Last edited by bl4nk; 02-10-2008 at 00:16.*

What's the purpose of the DB handle then?

[edit]

Got the answer from pred and bail in irc. Thanks for the help.

KaOs · 02-10-2008 , 00:38 Re: ReplaceString questions..

Quote:

Originally Posted by bl4nk

What's the purpose of the DB handle then?

[edit]

Got the answer from pred and bail in irc. Thanks for the help.

mind sharing?