Text escaping
Quotes, line breaks, angle brackets — the usual trouble spots when building strings. Escape them here first.
A quick note
SQL escaping only doubles single quotes,Does not replace parameterized queries. Concatenated SQL always carries injection risk; this is only for generating literals for debugging.