-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/06/2015 09:46 AM, Ben Newberg wrote: > Is there a good way to determine if a sql query is either > attempting to modify a database, or simply querying it?
You most like want to use the authoriser. It tells you exactly what the query is doing, and you can block/render harmless/approve the various actions making it up: https://sqlite.org/c3ref/set_authorizer.html A very brief example of what you get called back with is here: http://rogerbinns.github.io/apsw/example.html#authorizer-example Roger -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlXDm8oACgkQmOOfHg372QTuBACcCD99VOOBscT6YOHsE4jux3Zc lSYAoMksAQcHqieUHsdWniNqXnOFYJ4v =IG84 -----END PGP SIGNATURE-----