René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"SQL query function should support parameters","articleBody":"The `base.query` method in the Python library doesn't currently support the `parameters` parameter which is supported in the underlying REST API.\n\nAs the [REST API documentation](https://api.seatable.com/reference/querysql) mentions, this is an important security feature for preventing [SQL injection](https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html) attacks. Without it, values used in queries need to be manually escaped to handle characters that have special meaning in SQL, which is extremely error-prone.\n\nFrom the REST API documentation:\n\u003e Parameters in SQL clause to avoid sql injection. Only needed, if you use ? in the SQL statement. The parameters will replace the ? according to their order in the array.\n\n","author":{"url":"https://github.com/lir-ht","@type":"Person","name":"lir-ht"},"datePublished":"2026-02-07T23:23:32.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/112/seatable-api-python/issues/112"}