2 ms·
It also allow for things that will set off spidey senses in programmers everywhere despite theoretically being completely safe assuming mydb::sql() handles esca
by jeroenhd 2y ago
It also allow for things that will set off spidey senses in programmers everywhere despite theoretically being completely safe assuming mydb::sql() handles escaping in the format string:
cursor = mydb::sql(f"UPDATE user SET password={password} WHERE user.id={userid}")
- ajb 2y agoYeah. You really want "mydb::sql" to not take a basic_string, only a basic_formatted_string, so it will not compile if the conversion actually happened somehow.