get some sqlite quotes going on yo'

gistfile1.c

char *sqlite_sanitize( char* str ) 
{
    char *safe_str;
    int str_len = strlen( str );
    int str_bad_chars = 0;

    for( int i = 0; i < str_len; i++ )
        if ( str[i] == '\'' || str[i] == '\"' )
            str_bad_chars++;

    safe_str = alloca( str_len + ( str_bad_chars * 2 ) ); //, sizeof( char ) );
    
    int j = 0;
    for( int i = 0; i < str_len; i++ ) {
        if ( str[i] == '\'' ) {
            safe_str[j] = '\\'; 
            safe_str[j+1] = '\'';
            j++;
        } else if ( str[i] == '\\' ) {
            safe_str[j] = '\'';
            safe_str[j+1] = '\"';
            j++;
        } else {
            safe_str[j] = str[i];
        }

        j++;
    }

    return safe_str;
}