dblib.update_record: Get connection only if identifiers are ok
Co-authored-by: Leonardo Rochael Almeida <leorochael@gmail.com>
This commit is contained in:
parent
37d3e2b73c
commit
f8a1268fb1
@ -133,8 +133,8 @@ def fetch_record(table_name, pk):
|
||||
|
||||
|
||||
def update_record(table_name, pk, fields):
|
||||
con = get_connection()
|
||||
check_identifier(table_name)
|
||||
con = get_connection()
|
||||
names = ', '.join(fields.keys())
|
||||
placeholders = ', '.join(['?'] * len(fields))
|
||||
values = tuple(fields.values()) + (pk,)
|
||||
|
Loading…
Reference in New Issue
Block a user