Escapes a database string for literal insertion. This is not needed for binding strings in prepared statements. Generally, database strings are inserted into queries enclosed in single quotes ('). If user input has a single quote in it, the quote needs to be escaped. This function ensures that any unsafe characters are safely escaped according to the database engine and the database's character set. NOTE: SourceMod only guarantees properly escaped strings when the query encloses the string in single quotes. While drivers tend to allow double quotes (") instead, the string may be not be escaped (for example, on SQLite)!
native bool SQL_EscapeString(Handle database, const char[] string, char[] buffer, int maxlength, int& written = 0)