Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BoundParameterQuery on SELECT and FROM parameters #782

Open
Santobert opened this issue Oct 29, 2021 · 0 comments
Open

BoundParameterQuery on SELECT and FROM parameters #782

Santobert opened this issue Oct 29, 2021 · 0 comments

Comments

@Santobert
Copy link

Santobert commented Oct 29, 2021

There was an issue in 2019 regarding this problem: #615
This issue was closed because binding parameters other than WHERE was not possible according to the documentation at the time. It seems this part of the documentation was changed recently:
https://docs.influxdata.com/influxdb/v1.8/tools/api/#bind-parameters

The API supports binding parameters to particular field values or tag values. Use the syntax $<placeholder_key> as a placeholder in the query, and URL encode the map of placeholder keys to placeholder values in the request body. This allows all InfluxQL queries where the value is customizable - such as field values, function names, or intervals - to be represented using bind parameters.

Are there any plans to allow binding parameters in SELECT and FROM clauses?
Am I right that there is currently no way to protect SELECT and FROM clauses against injection?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant