driver/Mysql.php
public function quoteValue($str)
    {
        if(is_int($str) || is_float($str))
            return $str;

        if(($value=$this->_link->quote($str))!==false)
            return $value;
        else  // the driver doesn't support quote (e.g. oci)
            return "'" . addcslashes(str_replace("'", "''", $str), "\000\n\r\\\032") . "'";
    }
public function quoteValue($str)
    {
        if(is_int($str) || is_float($str))
            return $str;

        if(($value=$this->_link->quote($str))!==false)
            return $value;
        else  // the driver doesn't support quote (e.g. oci)
            return "'" . addcslashes(str_replace("'", "''", $str), "\000\n\r\\\032") . "'";
    }
为sql语句过滤变量值