X-Git-Url: https://git.jsancho.org/?p=mojodb.git;a=blobdiff_plain;f=MySQL.py;h=f5f888828b83109b43b41d7b8d109ee066b5742b;hp=d4604d3cf23dfa59866cca9c97d9f9063071d32c;hb=aed397c34f0bcc9eeb12e42256cc47e79e049971;hpb=792f961fb96bb8533e540970c54f43b958d77296

diff --git a/MySQL.py b/MySQL.py
index d4604d3..f5f8888 100644
--- a/MySQL.py
+++ b/MySQL.py
@@ -92,7 +92,7 @@ class Connection(connection.Connection):
         elif type(field) is dict:
             return "(%s)" % self._get_sql_query(db_name, field)
         else:
-            return "'%s'" % str(field)
+            return "'%s'" % str(field).replace("'", "''")
         
     def _get_sql_query(self, db_name, query):
         sql = "SELECT "
@@ -124,8 +124,8 @@ class Connection(connection.Connection):
         vals = []
         for k, v in values.iteritems():
             keys.append(k)
-            if type(v) in (str, unicode):
-                vals.append("'%s'" % v)
+            if type(v) is str:
+                vals.append("'%s'" % v.replace("'", "''"))
             else:
                 vals.append(str(v))
         sql = "INSERT INTO `%s`.`%s`(%s) VALUES (%s)" % (db_name, table_name, ",".join(keys), ",".join(vals))