array ( 0 => 'index.php', 1 => 'PHP Manual', ), 'head' => array ( 0 => 'UTF-8', 1 => 'en', ), 'this' => array ( 0 => 'pdo-pgsql.escapeidentifier.php', 1 => 'Pdo\\Pgsql::escapeIdentifier', 2 => 'Escapes a string for use as an SQL identifier', ), 'up' => array ( 0 => 'class.pdo-pgsql.php', 1 => 'Pdo\\Pgsql', ), 'prev' => array ( 0 => 'pdo-pgsql.copytofile.php', 1 => 'Pdo\\Pgsql::copyToFile', ), 'next' => array ( 0 => 'pdo-pgsql.getnotify.php', 1 => 'Pdo\\Pgsql::getNotify', ), 'alternatives' => array ( ), 'source' => array ( 'lang' => 'en', 'path' => 'reference/pdo_pgsql/pdo/pgsql/escapeidentifier.xml', ), 'history' => array ( ), ); $setup["toc"] = $TOC; $setup["toc_deprecated"] = $TOC_DEPRECATED; $setup["parents"] = $PARENTS; manual_setup($setup); contributors($setup); ?>

Pdo\Pgsql::escapeIdentifier

(PHP 8 >= 8.4.0)

Pdo\Pgsql::escapeIdentifier — Escapes a string for use as an SQL identifier

Description

public Pdo\Pgsql::escapeIdentifier(string $input): string

Escapes a string for use as an SQL identifier, such as a table, column, or function name. This is useful when a user-supplied identifier might contain special characters that would otherwise not be interpreted as part of the identifier by the SQL parser, or when the identifier might contain upper case characters whose case should be preserved.

Parameters

input
A string containing text to be escaped.

Return Values

A string containing the escaped data.

Examples

Example #1 Pdo\Pgsql::escapeIdentifier() example

<?php
$pdo = new Pdo\Pgsql('pgsql:dbname=test host=localhost', $user, $pass);

$unescapedTableName = 'UnescapedTableName';
$pdo->exec("CREATE TABLE $unescapedTableName ()");

$escapedTableName = $pdo->escapeIdentifier('EscapedTableName');
$pdo->exec("CREATE TABLE $escapedTableName ()");

$statement = $pdo->query(
"SELECT relname FROM pg_stat_user_tables WHERE relname ilike '%tablename'"
);

var_export($statement->fetchAll(PDO::FETCH_COLUMN, 0));

$tableNameWithSymbols = 'Table-Name-With-Symbols';
$pdo->exec("CREATE TABLE $tableNameWithSymbols ()");
?>

The above example will output something similar to:

array (
  0 => 'unescapedtablename',
  1 => 'EscapedTableName',
)
Fatal error: Uncaught PDOException: SQLSTATE[42601]: Syntax error: 7 ERROR:  syntax error at or near "Table"
LINE 1: CREATE TABLE Table-Name-With-Symbols ()

See Also