#!/bin/sh

SQLUSER="root"
SQLPASS="passwor339c"
SQLHOST="localhost"

SQL="$1"
SQLDB="$2"


if [ -z "$SQL" ]; then echo "ERROR: SQL not defined"; exit 1; fi
if [ -z "$SQLDB" ]; then SQLDB="records"; fi

echo "$SQL" | mysql -u$SQLUSER -p$SQLPASS -h$SQLHOST $SQLDB

PASSWORD=$1
doSQL "INSERT INTO active_records (password) VALUES ('$PASSWORD')"

$ a=''''";:#[]{}()|&^$@!?, .<>abc123'
$ printf -v var "%q" "$a"
$ echo "$var"
'"\;:#[]{}()|&^$@!?, .<>abc123

#escape for MySQL single string
PASSWORD=${PASSWORD//\/\\}
PASSWORD=${PASSWORD//'/\'}
PASSWORD=${PASSWORD//"/\"}

a=$(echo "$1" | sed s/"'"/"\'"/g)

a=$(echo "$1" | sed s/"x00"/"\'"/g)

echo "John O'hara"  | php -R 'echo addslashes($argn);'

name=$(echo "John O'hara"  | php -R 'echo addslashes($argn);')