QuoteSQL

[Lawrence D'Oliveiro]

In message <efc5b3$can$1 at lust.ihug.co.nz>, I wrote:

>     def EscapeSQLWild(Str) :
>         """escapes MySQL pattern wildcards in Str."""
>         Result = []
>         for Ch in str(Str) :
>             if Ch == "%" or Ch == "_" :
>                 Result.append("\\")
>             #end if
>             Result.append(Ch)
>         #end for
>         return "".join(Result)
>     #end EscapeSQLWild

Correction, backslashes need to be escaped at this level as well. So that
should become

     def EscapeSQLWild(Str) :
         """escapes MySQL pattern wildcards in Str."""
         Result = []
         for Ch in str(Str) :
             if Ch == "\\" or Ch == "%" or Ch == "_" :
                 Result.append("\\")
             #end if
             Result.append(Ch)
         #end for
         return "".join(Result)
     #end EscapeSQLWild