Imported From: http://groups.google.com/group/in-portal-dev/browse_thread/thread/7bb617bbe92faa3d#
In-Portal uses "kDBConnection::qstr" function to escape user request
variables before placing their values into database. This prevents sql
injections.
...
http://www.in-portal.com
http://www.alex-time.com