How to "escape" a whole String - an SQL query

Question

When I add a relative path to an SQL query as a String all the \ get removed.

I am trying to add the String ("pics\\"+onlyFile) and as you can see I have escaped the \ character so I don't understand why it is being removed. onlyFile is a variable containing a file name.

The value of the "src" variable (the one I am discussing) just before the SQL statement is correct, hence it is something happening when it is added to the SQL query.

Answer 1

\ is also a MySql escape character, so you need to pass \\ to it.

So, doubling the escaped string should work:

"pics\\\\" + onlyFile

Of course, if onlyFile has escape characters you will need to double escape them too.