On 2/12/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:


Igor is correct - you cannot do that now.  But I have sometimes
wondered if it would be nice to add an exec() function to SQLite
that would recursively invoke its argument as an SQL script.
For example:

   SELECT exec('DELETE FROM ' || quote(name))
     FROM sqlite_master
    WHERE ....;

There would be security implications here, of course.  Clearly
one would need to make sure that user-entered SQL (such as can
be seen at http://www.sqlite.org/cvstrac/new) does not have access
to the eval() function, just as it does not have access to the
the load_extension() function.



Perhaps if the row in sqlite_master were deleted that could invoke the drop
table functionality?

Reply via email to