PEAR::DB replacement class

The quote() method

This simply quotes a string ready for use in a query. For example:

<?php
    $username = $db->quote('richardh');

    $result = $db->query("SELECT * FROM myTable WHERE username = {$username}");
?>

You wouldn't do this of course, using it only (and always) for data coming from the user. If you don't, you leave yourself open to sql injection vulnerabilities