4 ms·
It looks good but using it in a naive manner to interface with a database, as shown in the example, without binding variables, leaving you totally open to injec
by mianos 11y ago
It looks good but using it in a naive manner to interface with a database, as shown in the example, without binding variables, leaving you totally open to injections is quite bad. What would be good is a lightweight binding to sqlalchemy, leaving the dangerous part to the expertsm.
That said, there is a real place for this library and quite a few new ones have popped up in the last year.
- ketralnis 11y agoIt's definitely some bad example code, but it's not really related to the use of the library