Skip to content

Alternative to prepared statements?Β #17

@jonny-rimek

Description

@jonny-rimek

As you write here https://github.com/segmentio/go-athena/blob/master/conn.go#L24 Athena doesn't support prepared statements, which is true.

My question is how do I safely build queries where part of the query is user input.

The database/sql package wants us to use prepared satements and doesn't seem to offer any alternative.
I wasn't able to to find anything regarding sql santization/escaping in golang, besides "use sql.Query"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions