Post #3812929
2026-06-05 11:16 UTC
unpolished thought: sql parser that forbids all literals. every single one. any values input to the query has to go through prepared statements
Replies (1)
-
@kopper@not-brain.d.on-t.work 2026-06-05 11:19
to be fair i feel like sql as The Language Databases Execute seems... outdated? like, query builders end up necessary the instant you're wiring it up to anything remotely dynamic (e.g. an API that search by text, but now add an option to filter by everything that has a file, and let the user switch ordering from chrono/reverse chrono/rating/whatever) while i am in no way any professional here i really do think databases need a structured intermediate layer exposed as their stable API, and sql can just be one of the interfaces that can compile down to that intermediate layer for interactive use and legacy crap