[Meller]

I'm not great with SQLite, but as I'm aware of MySQL, you can escape any string you're using in a query within the database in order to prevent SQL injections from such as names, inputs, and all those etcetera. This can be done using mysql_escape_string and mysql_format, (from BlueG's plugin and its MySQL library, as well as (handle)->real_escape_string() in PHP5). So my question is, how will it be safe to escape a string to be used with SQLite without taking parts of another plugin such as BlueG's.

I've not found any function like this by browsing the a_sampdb.inc.

[Konstantinos]

%q specifier in format function.

[Meller]

Quote:

Originally Posted by Konstantinos %q specifier in format function.

Oh well, as simple as it gets! ;3

Thanks, appreciate it.