SQL Escape Chars

[Arran Cudbard-Bell <A.Cudbard-Bell@sussex.ac.uk>]

Hi,

Am I right in thinking that most alpha numeric characters are escaped 
before being inserted into SQL databases, and that the resultant string 
is =<Ascii value as hex> ?

For example, the Reply-Message 'HP Networking equipment makes me sad, 
angry and staby.' would be entered as 'HP Networking equipment makes me 
sad=2C angry and staby.'

Or is it just sensitive SQL chars that are written in this form ? Is 
this going to change at some point in the future, or can I safely start 
replacing these with HTML special when displaying FreeRADIUS'd 
attributes ...

--
Arran Cudbard-Bell (A.Cudbard-Bell@sussex.ac.uk)
Authentication, Authorisation and Accounting Officer
Infrastructure Services | ENG1 E1-1-08 
University Of Sussex, Brighton
EXT:01273 873900 | INT: 3900