3 ms·

edit: updated my comment because I realized i was thinking of something else. What you're saying is something like the LLM only has 5 preset queries to choose f

edit: updated my comment because I realized i was thinking of something else. What you're saying is something like the LLM only has 5 preset queries to choose from and can supply the params but does not create a sql statement on its own. i can see how that would prevent sql injection.

deleted 1y ago
[deleted]
threecheese 1y ago
Whitelisting the five queries would prevent SQL injection, but also prevent it from being useful.