Python module to escape SQL special characters and quotes in strings
Project description
Python module to escape SQL special characters and quotes in strings
Assuming dangerous_input is a variable coming from a user input, a bad actor can exploit it to start injecting your database.
dangerous_input = "JhonWick'"
protected_raw_statement = "\"foo_table\".username='%s'" % sqlescape(dangerous_input)
protected_query = """
SELECT "foo_table".*, "bar_table".*
FROM "foo_table", "bar_table"
WHERE "foo_table".id = "bar_table".id
AND %s
""" % protected_raw_statement
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
sqlescapy-1.0.0.tar.gz
(1.5 kB
view details)
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sqlescapy-1.0.0.tar.gz.
File metadata
- Download URL: sqlescapy-1.0.0.tar.gz
- Upload date:
- Size: 1.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/1.14.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/41.2.0 requests-toolbelt/0.9.1 tqdm/4.35.0 CPython/3.7.4
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
952b66de0c864c52d0e7c0961669387976d21f292751bd82da749253d73308e8
|
|
| MD5 |
0f47120df90b9a16f6b03a80ec77ab08
|
|
| BLAKE2b-256 |
f4f41ccdf4dff65dcc74f8c0a9d39c4af79db2bae6d9b83a52d7b6dbe2df1329
|
File details
Details for the file sqlescapy-1.0.0-py3-none-any.whl.
File metadata
- Download URL: sqlescapy-1.0.0-py3-none-any.whl
- Upload date:
- Size: 2.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/1.14.0 pkginfo/1.5.0.1 requests/2.22.0 setuptools/41.2.0 requests-toolbelt/0.9.1 tqdm/4.35.0 CPython/3.7.4
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5da26ffc1327ce9b96cc2f493b5057d6fcef936121b78bf0da98964e4dd049f5
|
|
| MD5 |
c6a4adcc0add69c87496c5752d1c05ef
|
|
| BLAKE2b-256 |
800fc0be556ada12acf635725cb1aa89131dc86e6f4f9653148f2499ed8b1bb1
|