Skip to content
Prev Previous commit
Next Next commit
Update Doc/library/sqlite3.rst
Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>
  • Loading branch information
Erlend Egeberg Aasland and AlexWaygood authored Oct 31, 2021
commit f4059152b40a2c3da2b2011d23bcf0a045e80aa2
6 changes: 3 additions & 3 deletions Doc/library/sqlite3.rst
Original file line number Diff line number Diff line change
Expand Up @@ -73,9 +73,9 @@ This example uses the iterator form::

.. _sqlite3-placeholders:

SQL operations will usually need to use values from Python variables. It is poor
practice to assemble queries using Python's string operations, because they are
vulnerable to SQL injection attacks (see the `xkcd webcomic
SQL operations usually need to use values from Python variables. However,
beware of using Python's string operations to assemble queries, as they
are vulnerable to SQL injection attacks (see the `xkcd webcomic
<https://xkcd.com/327/>`_ for a humorous example of what can go wrong)::

# Never do this -- insecure!
Expand Down