I find this test weird. Why would the trimmed chars include the quotes ? We are passing a PHP string, while you now expect that we pass a PHP string containing a SQL string. this is a weird API IMO