Make SQL Queries Secure in Python

Today we learn how to design secure SQL queries in Python when working with SQLite3.
◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾
📚 Programming Books & Merch 📚
🐍 The Python Bible Book: www.neuralnine...
💻 The Algorithm Bible Book: www.neuralnine...
👕 Programming Merch: www.neuralnine...
🌐 Social Media & Contact 🌐
📱 Website: www.neuralnine...
📷 Instagram: / neuralnine
🐦 Twitter: / neuralnine
🤵 LinkedIn: / neuralnine
📁 GitHub: github.com/Neu...
🎙 Discord: / discord
🎵 Outro Music From: www.bensound.com/

[@FreihEitner]

Thank you! I had always read one should use prepared statements because they are more secure but I never saw HOW they were more secure explained so neatly.

[@Luc1an_]

Hello, can you make a tutorial on how to make async Api calls in background using any web framework of Python?

[@lawrencedoliveiro9104]

I prefer to use APSW rather than the standard SQLite3 module that comes with Python. Also, here is a handy generator function I like to use, that performs a query and lets you iterate over the returned rows, putting them through an optional mapping function (e.g. turning the row tuple into a dict mapping field names to values) before returning them:
def db_iter(conn, cmd, values = None, mapfn = lambda x : x) :
for item in conn.cursor().execute(cmd, values) :
yield mapfn(item)
♯end for
♯end db_iter

[@alexzakr]

Thanks for the simple explanation! It's really valuable!

[@mehmetaliertorer5819]

Can you do a video about password authentication from the database but with hash encryptions

[@HideBuz]

Your content is always top notch! Thanks!

[@Mullheimer]

Wow, crazy speed and well explained. Thx

[@RuneFToftlund]

great, excellent video. Maybe just slow down when executing and swapping window. Otherwise great.

[@jeekakrishna]

it is so usefull for me...i was beggining to learn this database and python connection....Can you direct me some free database hosting solutions for begginers and how to use them ?

[@Trazynn]

I'd love more windows file handling tutorials. Your file renamer was ace.

[@Trazynn]

Maybe constructing pdf's in bulk but with dynamic content, like giving people a certificate with their name and their score in it or something.

[@lawrencedoliveiro9104]

The Cairo graphics library lets you render graphics calls to different kinds of target surfaces, including PDF, SVG and PostScript files.

[@ayushpurohit8266]

Does it work for python/mysql connector? Also, how is this different from f-string or .format()?

[@walkaisa9933]

What’s the name of the sql syntax highlighting extension?

[@vivekan97]

Great content 💯

[@Redknightsilverdragon]

Thank you

[@piotrmazgaj]

Hi, I have a similar problem but it concerns the tables' name. I need to create many, many tables (each table for separate stock data and stock name is a table name). How can I put into my SQL query table name as variable, but without breaching the sanitation rule?

[@jimmynoosetron6518]

Do the thing where you

[@lawrencedoliveiro9104]

That’s a, shall we say, suboptimal way to do it. Given that the structure of the data is the same for all stocks, have just one table, and add the stock ID as a column to the table.

[@mahmoodjamshidian9525]

It was interesting

[@codewithrohit2927]

Hi

[@link6563]

TEACH ME HOW TO BE A l33t h4x0rs