sqlquote

func EscapeString ¶

func EscapeString(s string) string

EscapeString escapes s for embedding inside a single-quoted SQL string literal. It escapes BOTH backslash and single quote, because MatrixOne's MySQL scanner treats backslash as an escape introducer inside single-quoted literals (handleEscape in pkg/sql/parsers/dialect/mysql/scanner.go interprets \n, \t, \0, \\, \', ... and a trailing backslash even swallows the closing quote). So doubling single quotes alone is NOT enough: a literal backslash would corrupt the value (e.g. 'C:\Program' reads back as 'C:Program') or break the literal. Each backslash is doubled and each single quote is doubled. The caller supplies the surrounding quotes, e.g.

fmt.Sprintf("... '%s' ...", sqlquote.EscapeString(jsonParams))

This is the escape needed for JSON params / config blobs and any value that may contain single quotes or backslashes inside string values.

func Ident ¶

func Ident(ident string) string

Ident quotes an SQL identifier (database / table / column / alias) with backticks, doubling any embedded backtick so the identifier is preserved verbatim. e.g. Ident("a`b") == "`a“b`".

Use it everywhere an identifier is interpolated, instead of hand-writing "`" + name + "`" (which breaks the moment name contains a backtick).

func QualifiedIdent ¶

func QualifiedIdent(parts ...string) string

QualifiedIdent quotes each non-empty part and joins them with ".", producing e.g. "`db`.`tbl`" or "`src`.`col`". Empty parts are skipped.

func String ¶

func String(s string) string

String wraps s in single quotes after escaping, i.e. a ready-to-interpolate SQL string literal: String("a'b") == "'a”b'", String(`a\b`) == `'a\\b'`.