---
title: "escapeSQL"
description: "Returns the given string with special SQL characters escaped."
---

# escapeSQL

> Returns the given string with special SQL characters escaped.

**This function is used by Ignition's Expression language.**

## Description
Returns the given string with special SQL characters escaped. This function just replaces single quotes with two single quotes, and backslashes with two backslashes. See [system.db.runPrepUpdate](appendix/scripting-functions/system-db/system-db-runPrepUpdate.md) for a safer way to sanitize user input.

## Syntax
`escapeSQL(string)`

### Parameters

| Type | Parameter | Description |
|---|---|---|
| String | `string` | The starting string. |

### Results
**String** -  A string that has been formatted so that single quotes are replaced with two single quotes, and backslashes are replaced with two backslashes.

## Examples
```python title="Code Snippet"
"SELECT * FROM mytable WHERE option = '" + escapeSQL("Jim's Settings") + "'" // returns SELECT * FROM mytable WHERE option='Jim''s Settings'
```
```python title="Code Snippet"
"SELECT * FROM mytable WHERE option = 'escapeSQL({Root Container.TextField.text}) + "'" //returns a query with sanitized user input from a text field.
```