SQLite escape string c++

Question

Consider the following code

char bar[] = \"hello world \\\"One\\\", two, \'three\'\";
char *zSQL = sqlite3_mprintf(\"INSERT INTO stuff (`foo`) VALUES (\'%q\         


        

Answer 1

No. Use bound parameters.

See:
http://www.sqlite.org/c3ref/prepare.html
http://www.sqlite.org/c3ref/bind_blob.html

Answer 2

You have the same question that many have posed. There isn't anything built in.

The better solution to string concatenation would be to bind parameters, which sidesteps the escaping issue.