-
Notifications
You must be signed in to change notification settings - Fork 93
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adds a remote environment for DuckDB databases running in a Buena Vista server #135
Conversation
cursor.execute(f"LOAD '{ext}'") | ||
for key, value in self.creds.load_settings().items(): | ||
for key, value in creds.load_settings().items(): | ||
# Okay to set these as strings because DuckDB will cast them | ||
# to the correct type | ||
cursor.execute(f"SET {key} = '{value}'") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Might be worth escaping quotes here?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't understand?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(Like, which quotes should I be escaping?)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In the case that someone passes a string containing single quotes I mean - they should be doubled up to escape them. It's not directly relevant to this pr, just figured it was worth mentioning
(using the postgres protocol)