:sig String mysql_escape(String raw, char quote_char) :params raw : the string to be escaped quote_char : the character that should be used to wrap the string (pass NULL for no wrapping) return value : the safe version of the 'raw' string :desc Escapes a string such that it can be passed as a safe value into an SQL expression. :see >mysql :related **PHP:** Modern PHP database access through `mysqli_*` or PDO methods rather than the old `mysql_*` family **JavaScript / Node.js:** Node database clients such as `mysql2`, query builders, or ORM adapters