dblib.update_record: Get connection only if identifiers are ok

Co-authored-by: Leonardo Rochael Almeida <leorochael@gmail.com>
This commit is contained in:
Luciano Ramalho
2021-04-15 12:50:50 -03:00
committed by GitHub
parent 37d3e2b73c
commit f8a1268fb1

View File

@@ -133,8 +133,8 @@ def fetch_record(table_name, pk):
def update_record(table_name, pk, fields):
con = get_connection()
check_identifier(table_name)
con = get_connection()
names = ', '.join(fields.keys())
placeholders = ', '.join(['?'] * len(fields))
values = tuple(fields.values()) + (pk,)