2 ms·
For sqlite3, it absolutely takes a regular string. If you want to substitute parameters, you put a '?' in the string for each one, and provide an additional (o
by crazygringo 2y ago
For sqlite3, it absolutely takes a regular string.
If you want to substitute parameters, you put a '?' in the string for each one, and provide an additional (optional) tuple parameter with the variables.
So no, there's no explicitly unsafe function. That's my point.
- mcintyre1994 2y agoGotcha. I’d guess they’d want to deprecate that function and create a new one that only accepts a template then, which is definitely annoying! I figured they’d already have more separation between prepared and raw strings which would make it easier.