Skip to content

Alternative to prepared statements? #17

@jonny-rimek

Description

@jonny-rimek

As you write here https://github.com/segmentio/go-athena/blob/master/conn.go#L24 Athena doesn't support prepared statements, which is true.

My question is how do I safely build queries where part of the query is user input.

The database/sql package wants us to use prepared satements and doesn't seem to offer any alternative.
I wasn't able to to find anything regarding sql santization/escaping in golang, besides "use sql.Query"

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions