diff -r ad9d0794d4e7 -r c1f37afdcbb9 plugins/include/dbi.inc
--- a/plugins/include/dbi.inc	Sun Aug 09 15:35:49 2009 -0700
+++ b/plugins/include/dbi.inc	Mon Aug 10 22:16:58 2009 -0400
@@ -288,6 +288,10 @@
  * characters are safely escaped according to the database engine and 
  * the database's character set.
  *
+ * NOTE: SourceMod only guarantees properly escaped strings when the query
+ * encloses the string in ''. While drivers tend to allow " instead, the string
+ * may be not be escaped (for example, on SQLite)!
+ *
  * @param hndl			A database Handle.
  * @param string		String to quote.
  * @param buffer		Buffer to store quoted string in.