Drupal: Does db_query and db_insert escape input values? prevent sql injection?

1:58 |