This is my first foree into PDO-SQLite and I saw samples using binding, I am using prepare() though without binding.
So you think that had I used binding my escape issue would not be an issue ? *Ben Marchbanks* www.magazooms.com <http://www.magazooms.com/> Signature Email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> Phone: (864) 284.9918 Eric Minbiole wrote: >> Now I remember why I wasn't using single quotes in SQLite statements - >> >> because escaped single quoted values like >> >> 'Billy\'s bike' >> >> cause it to fail. Again I think its related to PHP-PDO SQLite >> implementation..... >> > > Have you considered using prepared statements and bound parameters? > That way, you never have to worry about character escaping, or SQL > injection problems. > > ~Eric > _______________________________________________ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > > > _______________________________________________ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users