PHP pg_escape_string function

Like this blog? Consider exploring one of our sponsored banner ads...

pg_escape_string

(PHP 4 >= 4.2.0, PHP 5)

pg_escape_string() escapes a string for
insertion into the database. It returns an escaped string in the
PostgreSQL format. Use of this function is recommended instead of
addslashes(). If the type of the column
is bytea, pg_escape_bytea() must be used
instead.

Note:
This function requires PostgreSQL 7.2 or later.

A string containing text to be escaped.

A string containing the escaped data.

Example 1. pg_escape_string() example

  // Connect to the database
  $dbconn = pg_connect('dbname=foo');
 
  // Read in a text file (containing apostrophes and backslashes)
  $data = file_get_contents('letter.txt');
 
  // Escape the text data
  $escaped = pg_escape_string($data);
 
  // Insert it into the database
  pg_query("INSERT INTO correspondence (name, data) VALUES ('My letter', '{$escaped}')");