Quote:
Originally Posted by oo_jazz_oo
I have all 's being parsed clientside before sending it serverside though.
|
I tested it, and got SQL errors when using single quotes so you've still got some fixing up to do. Just drop the clientside parsing, and escape on the serverside.
Other than that, it's pretty nifty.