Allow to save dictionaries, lists, tuples, etc, as document ids

[mojodb.git] / MySQL.py

diff --git a/MySQL.py b/MySQL.py
index d4604d3cf23dfa59866cca9c97d9f9063071d32c..3ee09aef346bea3cb0e46a9bc9a296c5029a4e67 100644 (file)
--- a/MySQL.py
+++ b/MySQL.py
@@ -92,7 +92,7 @@ class Connection(connection.Connection):
         elif type(field) is dict:
             return "(%s)" % self._get_sql_query(db_name, field)
         else:
-            return "'%s'" % str(field)
+            return "'%s'" % str(field).replace("'", "''")
         
     def _get_sql_query(self, db_name, query):
         sql = "SELECT "
@@ -125,7 +125,7 @@ class Connection(connection.Connection):
         for k, v in values.iteritems():
             keys.append(k)
             if type(v) in (str, unicode):
-                vals.append("'%s'" % v)
+                vals.append("'%s'" % v.replace("'", "''"))
             else:
                 vals.append(str(v))
         sql = "INSERT INTO `%s`.`%s`(%s) VALUES (%s)" % (db_name, table_name, ",".join(keys), ",".join(vals))