Comment Comment by Tenoke No, just `db.execute(f"QUERY WHERE name = {db.safe(name)}")`And you add the safety inside db.safe explicitly instead of implicitly in db.execute.If you want to be fancy you can also assign name to db.foos inside db.safe to use it later (even in execute). parent Tenoke 1 year ago
And you add the safety inside db.safe explicitly instead of implicitly in db.execute.
If you want to be fancy you can also assign name to db.foos inside db.safe to use it later (even in execute).