-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/06/2015 09:46 AM, Ben Newberg wrote:
> Is there a good way to determine if a sql query is either
> attempting to modify a database, or simply querying it?

You most like want to use the authoriser.  It tells you exactly what
the query is doing, and you can block/render harmless/approve the
various actions making it up:

  https://sqlite.org/c3ref/set_authorizer.html

A very brief example of what you get called back with is here:

  http://rogerbinns.github.io/apsw/example.html#authorizer-example

Roger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlXDm8oACgkQmOOfHg372QTuBACcCD99VOOBscT6YOHsE4jux3Zc
lSYAoMksAQcHqieUHsdWniNqXnOFYJ4v
=IG84
-----END PGP SIGNATURE-----

Reply via email to