Feature: Formatting Query like fmt.Sprintf

[aoisensi]

Is your feature request related to a problem?

Please add formatting query function. Like this one.

what := surrealdb.Format("SELECT * FROM user WHERE name = ?;", username")

You need to add like this function because SQL injection vulnerabilities occur frequently.

Describe the solution

-

Alternative methods

-

SurrealDB version

-

Contact Details

No response

Is there an existing issue for this?

• [X] I have searched the existing issues

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

[plally]

You can pass variables like this to prevent sql injection. Would that solve your issue?

result, err := db.Query("SELECT * FROM user WHERE name = $user;", map[string]any{
    "user": username.
})

[aoisensi]

Wow thank you LGTM Maybe I am blind... Sorry!