Mysql scape string

[Feche1320]

If I have a string with 'ilegal' characters, Mysql throws an error (1064)

local name = getPlayerName(source) -- Let's say that the string returned by getPlayerName is Fe'che

dbExec(db, "UPDATE stats SET anyvalue = '" ..name.. "'")

I tried with gsub -> name:gsub("\'", "\''"), but no success

[ma2med]

try this dbExec(db, "UPDATE stats SET anyvalue = ?", name) 

[Feche1320]

I will try ASAP, thanks