Re: Avoiding SQL Injection in Spark SQL

2015-09-15 Thread V Dineshkumar
s (and runs on the same >> execution engine). >> >> On Thu, Sep 10, 2015 at 12:10 AM, Sean Owen <so...@cloudera.com> wrote: >> >>> I don't think this is Spark-specific. Mostly you need to escape / >>> quote user-supplied values as with any SQL engi

Re: Avoiding SQL Injection in Spark SQL

2015-09-10 Thread Sean Owen
I don't think this is Spark-specific. Mostly you need to escape / quote user-supplied values as with any SQL engine. On Thu, Sep 10, 2015 at 7:32 AM, V Dineshkumar <developer.dines...@gmail.com> wrote: > Hi, > > What is the preferred way of avoiding SQL Injection while using Spar

Re: Avoiding SQL Injection in Spark SQL

2015-09-10 Thread Michael Armbrust
you need to escape / > quote user-supplied values as with any SQL engine. > > On Thu, Sep 10, 2015 at 7:32 AM, V Dineshkumar > <developer.dines...@gmail.com> wrote: > > Hi, > > > > What is the preferred way of avoiding SQL Injection while using Spark > SQL? &g

Re: Avoiding SQL Injection in Spark SQL

2015-09-10 Thread Ruslan Dautkhanov
/ >> quote user-supplied values as with any SQL engine. >> >> On Thu, Sep 10, 2015 at 7:32 AM, V Dineshkumar >> <developer.dines...@gmail.com> wrote: >> > Hi, >> > >> > What is the preferred way of avoiding SQL Injection while using Spark >

Avoiding SQL Injection in Spark SQL

2015-09-10 Thread V Dineshkumar
Hi, What is the preferred way of avoiding SQL Injection while using Spark SQL? In our use case we have to take the parameters directly from the users and prepare the SQL Statement.I was not able to find any API for preparing the SQL statement safely avoiding injection. Thanks, Dinesh Philips