News for hackers. Stuff that matters.
Re:Show HN: Sqlbind a Python library to compose raw SQL by bvrmn on Monday February 26, 2024 @06:49PM (#39518303)
It's my biggest concern as well. For real world application I tend to use out of line filters:

    filters = [q.field == value1, q.field2 > value2]
    sql = f'SELECT * FROM table {WHERE(*filters)}'
It's a little harder to misuse.

There are no comments on this comment yet.