Skip to content

Protecting against SQL Injection Attacks #86

@dbarentine

Description

@dbarentine

If I create a query like:
await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");

If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?

I would want something like:
query = "select field from measurement where {something}";
params = { "something", "value" };
await client.QueryMultiSeriesAsync ("_internal", query, params);

And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions