1.1 --- a/plugins/include/dbi.inc Sun Aug 09 15:35:49 2009 -0700
1.2 +++ b/plugins/include/dbi.inc Mon Aug 10 22:16:58 2009 -0400
1.3 @@ -288,6 +288,10 @@
1.4 * characters are safely escaped according to the database engine and
1.5 * the database's character set.
1.6 *
1.7 + * NOTE: SourceMod only guarantees properly escaped strings when the query
1.8 + * encloses the string in ''. While drivers tend to allow " instead, the string
1.9 + * may be not be escaped (for example, on SQLite)!
1.10 + *
1.11 * @param hndl A database Handle.
1.12 * @param string String to quote.
1.13 * @param buffer Buffer to store quoted string in.