Hacker News new | ask | show | jobs
by mianos 3833 days ago
It looks good but using it in a naive manner to interface with a database, as shown in the example, without binding variables, leaving you totally open to injections is quite bad. What would be good is a lightweight binding to sqlalchemy, leaving the dangerous part to the expertsm. That said, there is a real place for this library and quite a few new ones have popped up in the last year.
1 comments

It's definitely some bad example code, but it's not really related to the use of the library