How to insert statements that contains apostrophes into Sqlite database

iphone cocoa-touch sqlite

This is something that I go through in SQL Server and MySQL as well. You should definitely use parameterised SQL queries

See this page for examples in many languages.

I strongly discourage the use of literal strings in the update statement. Use parameterized queries. There's no reason to compromise security

You can write a function which replaces each instance of character ' with ''

iphone cocoa-touch sqlite

Simply replace ' characters to ` :)

text = text.replace("'", "`");

iphone cocoa-touch sqlite

With python and sqlite3 i found that the following line worked perfectly (replacing ' with '')

myString = myString.replace('\'', '\'\'')

the string can then be concatenated in an UPDATE command

The line is stored and displayed correctly. It also works great with Grafana.

I'm not yet sure if this is specific to the sqlite3 python module or if it can be generalized

CodeHunter