db_escape_field($field)
Restricts a dynamic column or constraint name to safe characters.
Only keeps alphanumeric and underscores.
string $field: The field name to escape.
string The escaped field name as a string.
as of Drupal 8.0.x, will be removed in Drupal 9.0.0. Instead, get a database connection injected into your service from the container and call escapeTable() on it. For example, $injected_database->escapeTable($table);
\Drupal\Core\Database\Connection::escapeField()
function db_escape_field($field) { return Database::getConnection()->escapeField($field); }
© 2001–2016 by the original authors
Licensed under the GNU General Public License, version 2 and later.
Drupal is a registered trademark of Dries Buytaert.
https://api.drupal.org/api/drupal/core!includes!database.inc/function/db_escape_field/8.1.x