On Tuesday, 21 July 2015 at 17:23:30 UTC, ddos wrote: > How do i sanitize a string for database query? You generally shouldn't even try, instead use the database functions that bind parameters to the procedure. > Is there some builtin function? It is different for each database target.