Simple db_query question

[MaisterK]

Hi
I have simple security question:
strings used in $smcFunc['db_query'] need to be escaped?
or the function do this?

[vbgamer45]

They should be if you are passing the data raw in.
If you are using the parameters type mapping then you are in better shape.