pi-lens
Version:
Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo
11 lines (10 loc) • 474 B
YAML
id: no-python-sql-string-concat
valid:
- 'cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))'
- 'cursor.execute("SELECT * FROM users")'
- 'cursor.execute(query, params)'
- 'cursor.execute("SELECT * FROM users WHERE id = :id", {"id": user_id})'
- 'cursor.execute(f"DELETE FROM sessions WHERE token = {token}")'
invalid:
- 'cursor.execute("SELECT * FROM users WHERE id = " + user_id)'
- "cursor.execute('SELECT * FROM users WHERE id = ' + user_id)"