An apostrophe might have an even better effect than a comma. PSA: Don't shoot yourself in the foot by escaping commas or apostrophes! Like in password:",\,',\''!DROP TABLE(''users')" That's more likely to "trick" the log on machine that to bust a CSV file.