Parametrised queries

Jump to bottom

John Morrice edited this page Aug 2, 2017 · 4 revisions

In order to securely program Godless, parametrised queries are provided.

Here are some example usages of the godless/query package.

Provide placeholder for literal:

query.Compile("select cars where str_eq(driver, ?)", "Mr Fast")

Provide placeholder for key:

query.Compile("select cars where str_eq(??, \"Mr Fast\")", "driver")

Provide placeholder for table name:

query.Compile("join ?? rows (@key=rowInAnyTable)", "My table")