MySQL Real Escape Function in C#

If you need a similiar function to the mysql_real_escape_string() from php, you might could use this one:

public static string MySQLEscape(string str)
return Regex.Replace(str, @"[\x00'""\b\n\r\t\cZ\\%_]",
delegate(Match match)
string v = match.Value;
switch (v)
case "\x00":            // ASCII NUL (0x00) character
return "\\0";
case "\b":              // BACKSPACE character
return "\\b";
case "\n":              // NEWLINE (linefeed) character
return "\\n";
case "\r":              // CARRIAGE RETURN character
return "\\r";
case "\t":              // TAB
return "\\t";
case "\u001A":          // Ctrl-Z
return "\\Z";
return "\\" + v;

Found it here. Here is another solution.

The article or information provided here represents completely my own personal view & thought. It is recommended to test the content or scripts of the site in the lab, before making use in the production environment & use it completely at your own risk. The articles, scripts, suggestions or tricks published on the site are provided AS-IS with no warranties or guarantees and confers no rights.

About Karsten Schneider 303 Articles
He is Consultant for SharePoint Solutions for collaboration, communication and business processes. He provides his customers applications based on standard features as well as development or combining the power of several microsoft tools like Dynamics CRM. In his free time he tries to collect tipps and worthy experience in this blog.

Be the first to comment

Leave a Reply

Your email address will not be published.