Re: [sqlite] SQLite3 immune from injection attacks if file is readonly?

On Sat, 18 Jul 2009 10:17:14 -0700, Kelly Jones wrote: > On a website, I want to take a user's query "as is", save it to a > userquery.txt, and then do: > > sqlite3 /path/to/mydb < userquery.txt > > where /path/to/mydb is a *read-only* file. > > Is there *any* risk of an injection attack here?

Re: [sqlite] SQLite3 immune from injection attacks if file is readonly?

Kelly Jones wrote: > On a website, I want to take a user's query "as is", save it to a > userquery.txt, and then do: > > sqlite3 /path/to/mydb < userquery.txt > > where /path/to/mydb is a *read-only* file. > > Is there *any* risk of an injection attack here? > > Specifically, does sqlite3 have any

[sqlite] SQLite3 immune from injection attacks if file is readonly?

On a website, I want to take a user's query "as is", save it to a userquery.txt, and then do: sqlite3 /path/to/mydb < userquery.txt where /path/to/mydb is a *read-only* file. Is there *any* risk of an injection attack here? Specifically, does sqlite3 have any shell escapes or any way to change