@@ -24,27 +24,27 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
24
24
)" ,
25
25
( ) ,
26
26
) ?;
27
-
27
+
28
28
let query = format ! ( "INSERT INTO person (name, age) VALUES ('{}', '{}')" , name, age) ;
29
29
30
30
connection. execute ( & query, ( ) ) ?; // $ sql-sink
31
31
32
32
let person = connection. query_row ( & query, ( ) , |row| { // $ sql-sink
33
33
Ok ( Person {
34
- id : row. get ( 0 ) ?, // $ database-read
35
- name : row. get ( 1 ) ?, // $ database-read
36
- age : row. get ( 2 ) ?, // $ database-read
34
+ id : row. get ( 0 ) ?, // $ MISSING: database-read
35
+ name : row. get ( 1 ) ?, // $ MISSING: database-read
36
+ age : row. get ( 2 ) ?, // $ MISSING: database-read
37
37
} )
38
38
} ) ?;
39
39
40
40
let mut stmt = connection. prepare ( "SELECT id, name, age FROM person" ) ?; // $ sql-sink
41
41
let people = stmt. query_map ( [ ] , |row| {
42
42
Ok ( Person {
43
- id : row. get_unwrap ( 0 ) , // $ database-read
44
- name : row. get_unwrap ( 1 ) , // $ database-read
45
- age : row. get_unwrap ( 2 ) , // $ database-read
43
+ id : row. get_unwrap ( 0 ) , // $ MISSING: database-read
44
+ name : row. get_unwrap ( 1 ) , // $ MISSING: database-read
45
+ age : row. get_unwrap ( 2 ) , // $ MISSING: database-read
46
46
} )
47
47
} ) ?;
48
48
49
49
Ok ( ( ) )
50
- }
50
+ }
0 commit comments