Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow queries with parameters to avoid SQL injection #75

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Allow queries with parameters to avoid SQL injection #75

wants to merge 2 commits into from
+49 −12

Commits on Apr 5, 2019

  1. Allow queries with parameters to avoid SQL injection / issues with es… 

    …caping strings.

This means we can replace
  df = sqldf("select * from df where id='"+id+"'")
with the parametrised query
  df = sqldf("select * from df where id=?", params = (id, ))
which will work even if the variable id contains single quotes.

Thanks a lot for this nice project.
    @kljh
    kljh committed Apr 5, 2019
    Configuration menu
    Copy the full SHA
    424051b View commit details
    Browse the repository at this point in the history

Commits on Apr 7, 2019

  1. Allow registration of user defined functions (SQLite only) 

    See examples/demo2.py
    @kljh
    kljh committed Apr 7, 2019
    Configuration menu
    Copy the full SHA
    23e477b View commit details
    Browse the repository at this point in the history