sql injection in python

Hacked.fyi answered on November 1, 2022 Popularity 9/10 Helpfulness 2/10

answer sql injection in python

sql injection in python

Comment

import psycopg2

connection = psycopg2.connect(
    host="localhost",
    database="psycopgtest",
    user="postgres",
    password=None,
)
connection.set_session(autocommit=True)

# BAD EXAMPLE. DON'T DO THIS!
def is_admin(username: str) -> bool:
    with connection.cursor() as cursor:
        cursor.execute("""
            SELECT
                admin
            FROM
                users
            WHERE
                username = '%s'
        """ % username)
        result = cursor.fetchone()
    admin, = result
    return admin

Popularity 9/10 Helpfulness 2/10 Language sql

Source: Grepper

Tags: python sql sql-injection

Link to this answer
Share Copy Link

Contributed on Nov 01 2022

Hacked.fyi

0 Answers Avg Quality 2/10

Continue with Google

By continuing, I agree that I have read and agree to Greppers's Terms of Service and Privacy Policy.

sql injection in python

Contents

More Related Answers

sql injection in python

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.