SQLite SQL Injection

Hi there,

in PHP to prevent I can use

mysql_real_escape_string

what do i do in LUA??

I have a textfile where something like that is included

  <kind>!no!</kind>

  <value>anything’ OR ‘x’='x</value>

while imported into my sqlite database i get “0” at result

thanks

chris