Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Protecting against SQL Injection Attacks #86

Open
dbarentine opened this issue Dec 12, 2019 · 1 comment
Open

Protecting against SQL Injection Attacks #86

dbarentine opened this issue Dec 12, 2019 · 1 comment

Comments

@dbarentine
Copy link

dbarentine commented Dec 12, 2019

If I create a query like:
await client.QueryMultiSeriesAsync ("_internal", "select field from measurement where something");

If "something" is generated from user input is there something in the library that can parameterize that input to guard against SQL injection attacks?

I would want something like:
query = "select field from measurement where {something}";
params = { "something", "value" };
await client.QueryMultiSeriesAsync ("_internal", query, params);

And QueryMultiSeriesAsync would automatically scrub/escape params to guard against SQL injection. Also see: InfluxDB Python Bind Parameters

@mvadu
Copy link
Contributor

mvadu commented Dec 28, 2019

TODO: 2.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants