[FEATURE]: do not allow raw SQL execution in db.execute()
, instead have a dedicated method for it.
#3598
Labels
db.execute()
, instead have a dedicated method for it.
#3598
Feature hasn't been suggested before.
Describe the enhancement you want to request
I propose
db.execute()
should not allow executing a string.Instead, a separate method should be added for that. For example:
db.executeSQLDangerously(sql: string)
.Motivation
One can forget to use
sql
or accidentally remove it.For example, these 2 snippets look eerily similar and the difference might be overlooked during code review:
vs
P.S. I'd be happy to submit a PR if this proposal is approved..
The text was updated successfully, but these errors were encountered: