About This Tool
Documentation
What does this tool do?
A database query sanitizer that escapes quotes (`'`, `"`), backslashes (`\`), null bytes, and identifier characters according to specific dialect rules (PostgreSQL, MySQL, SQLite, standard SQL) with optional automated single-quote wrapping.
When should you use it?
Use this tool to safely format raw SQL queries when writing migration scripts, sanitize string parameters for dynamic queries, or escape database dump files containing complex text data.
Key Capabilities & Features
Highlights
Escape single quotes, double quotes, and backslashes for safe SQL query insertion
Dialect-specific escaping rules for MySQL, PostgreSQL, SQLite, Oracle, and MSSQL
SQL injection vulnerability prevention through query string sanitization
Unescape escaped SQL strings back to clean raw text and payloads
Batch multi-line SQL statement escaping with syntax highlighting