undefined | Better HN

0 pointssymlinkk9y ago0 comments

> Just a string of SQL that I compose with Python string formatting

sounds like an SQL injection waiting to happen

0 comments

2 comments · 2 top-level

ksri9y ago

I posted elsewhere on this thread, but take a look at JinjaSQL - https://github.com/hashedin/jinjasql. Let's you generate SQL from a string template without worrying about SQL injection.

Waterluvian9y ago

Hah!! So so true.

j / k navigate · click thread line to collapse