4 ms·
> Just a string of SQL that I compose with Python string formatting sounds like an SQL injection waiting to happen
by symlinkk 10y ago
> Just a string of SQL that I compose with Python string formatting
sounds like an SQL injection waiting to happen
- Waterluvian 10y agoHah!! So so true.
- ksri 10y agoI posted elsewhere on this thread, but take a look at JinjaSQL - https://github.com/hashedin/jinjasql https://github.com/hashedin/jinjasql. Let's you generate SQL from a string template without worrying about SQL injection.