dblib.update_record: Get connection only if identifiers are ok

Co-authored-by: Leonardo Rochael Almeida <leorochael@gmail.com>
This commit is contained in:
Luciano Ramalho 2021-04-15 12:50:50 -03:00 committed by GitHub
parent 37d3e2b73c
commit f8a1268fb1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -133,8 +133,8 @@ def fetch_record(table_name, pk):
def update_record(table_name, pk, fields):
con = get_connection()
check_identifier(table_name)
con = get_connection()
names = ', '.join(fields.keys())
placeholders = ', '.join(['?'] * len(fields))
values = tuple(fields.values()) + (pk,)