Urgent.News

What's breaking now, across thousands of outlets.

Tech

Enough of chaotic f-strings: fluid and safe SQL for ClickHouse.

Basta de f-strings caóticos: SQL fluido y seguro para ClickHouse. Día 08 de la serie técnica WClickHouse Open Source. Construir queries analíticas dinámicas uniendo f-strings es un accidente esperando ocurrir. WClickHouse QueryBuilder te da composición SQL fluida y segura. Los Problemas Reales Cadenas SQL multilínea frágiles llenas de f-strings y errores de sintaxis Riesgos de inyección SQL por…

Translated from Spanish Read in Spanish

WClickHouse Open Source has introduced a new tool, WClickHouse QueryBuilder, to create dynamic analytical queries safely and fluently for ClickHouse. This tool helps avoid problems associated with composing SQL queries using f-strings, such as SQL injection risks and syntax errors. The QueryBuilder provides a chained API for building queries and supports advanced operators like joins and subqueries.

It has been tested against real ClickHouse instances with over 95% test coverage and is available on GitHub and PyPI. The tool is designed for Python 3.9 to 3.14 and uses Apache Arrow and Pydantic v2.

Written by urgent.news from Dev.to's report — not a translation of it. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Your Next.js API route is public—even if your UI isn’t.

Hiding a form behind a client-side condition doesn't make its API route private. Unless the route enforces its own checks, another client can call it directly.

  • Public API routes in Next.js are accessible even if UI is not visible.
  • Unauthorized data submission possible via direct URL access.
  • FCaptcha provides server-side form verification solution.

No more messy f-strings: Type-safe fluent SQL for ClickHouse.

No more messy f-strings: Type-safe fluent SQL for ClickHouse. Day 08 of the WClickHouse Open-Source Engineering Series. Building dynamic analytical queries by stitching f-strings together is an…

  • Introduces QueryBuilder for type-safe, fluent SQL in ClickHouse
  • Chained API methods (table(), select(), etc.) build queries naturally
  • Automatic injection protection with escaped, validated parameters

More from Monday 28 September →