HolonGlobe/doctrine1 — pull request #1 by marek-saji (2013-11-05 13:26:18+00:00)
Title: Quote backslashes

(At least in MySQL) It is possible to do a SQL injection by passing "\'"
in a string. It gets quoted as "\''", but backslash escapes first quote
and second one ends a string in SQL.