title: Is there any techniques to avoid SQL injection when I develop on iPhone using Objective C?
body: <p>I have a text area for user to input something, and I will pass the text as a parameter to server, is there any way / api to ensure the user's text must be valid, even they are not valid, should be treat it as a normal string? (Escaping API?) Thank you. </p>