almarklein / itemdb

Easy transactional database for Python dicts, backed by SQLite
https://itemdb.readthedocs.io
MIT License
18 stars 2 forks source link

Prevent users from using an invalide table name #6

Open almarklein opened 3 years ago

almarklein commented 3 years ago

This creates an sqlite syntaxerror which feels rather cryptic. A stackoverflow thread suggests anything prefixed with "sqlite_" is forbidden, but anything else should work, as long as you enclose with quoted. Not sure if we do that.