Escapes str for use within an SQL command (to avoid SQL injection attacks).
Note that the returned value still needs to be enclosed in single quotes before being used in an SQL statement.
| this |
a server provider. |
| cnc |
a Connection object, or null |
| str |
a string to escape |
|
a new string suitable to use in SQL statements |