RENDER() {
string query = "SELECT * FROM :table WHERE x = :val";
StringMap params;
params["table"] = "TableName";
params["val"] = "Dubious\\Value'Name\nwith;breaks";
MySQL con;
if(con.connect("localhost", "root", "q831b197f"))
{
echo("connection established\n");
echo("error: "+con.error()+"\n");
echo("quotation test: "+con.escape("‘\"' or 1=1;–.")+"\n");
echo("query parse: "+con.parse_query_parameters(query, params)+"\n");
}
?>
= var_dump(context->params) ?>}