wpdb::_escape()
Escapes a string or array value for use in an SQL query.
Arrays are processed recursively; their keys and structure are preserved.
This method is used internally by esc_sql(). Usually use wpdb::prepare() instead of calling it directly.
This method is intended only for quoted string values inside an SQL query. It does not protect table names, column names, SQL operators, or other query parts. It does not add quotes. Percent signs may be replaced with internal WordPress placeholders.
Method of the class: wpdb{}
Uses: wpdb::_real_escape()
Used By: esc_sql()
1 time — 0.00002 sec (very fast) | 50000 times — 0.21 sec (very fast)
No Hooks.
Returns
String|Array.
string- escaped string.array- array with recursively escaped values.
Usage
global $wpdb; $wpdb->_escape( $data );
- $data(string|array) (required)
- String or array of values to escape.
Examples
#1 Escaping an array of values
global $wpdb; $values = $wpdb->_escape( [ 'name' => "O'Reilly", 'status' => 'publish', ] ); /* Array ( [name] => O\'Reilly [status] => publish ) */
Changelog
| Since 2.8.0 | Introduced. |
wpdb::_escape() wpdb:: escape code WP 7.1
public function _escape( $data ) {
if ( is_array( $data ) ) {
foreach ( $data as $k => $v ) {
if ( is_array( $v ) ) {
$data[ $k ] = $this->_escape( $v );
} else {
$data[ $k ] = $this->_real_escape( $v );
}
}
} else {
$data = $this->_real_escape( $data );
}
return $data;
}