Urgent.News

What's breaking now, across thousands of outlets.

Tech

Basta de f-strings caóticos: SQL fluido y seguro para ClickHouse.

Basta de f-strings caóticos: SQL fluido y seguro para ClickHouse. Día 08 de la serie técnica WClickHouse Open Source. Construir queries analíticas dinámicas uniendo f-strings es un accidente esperando ocurrir. WClickHouse QueryBuilder te da composición SQL fluida y segura. Los Problemas Reales Cadenas SQL multilínea frágiles llenas de f-strings y errores de sintaxis Riesgos de inyección SQL por…

Original Spanish Read in English

Say goodbye to chaotic f-strings: fluid and secure SQL for ClickHouse. In this 8th installment of the WClickHouse Open Source technical series, learn how to build dynamic analytical queries without the risks of f-strings. The WClickHouse QueryBuilder provides fluid, secure SQL composition. Say goodbye to fragile multi-line SQL strings riddled with syntax errors and SQL injection vulnerabilities.

The implementation of QueryBuilder makes it easy to reuse code when composing dynamic dashboards with filters. The API is built on top of sequential methods: select(), where(), group_by(), order_by(). The system is protected against SQL injection with automatically escaped and validated parameters. Advanced operators are supported natively for joins, union_all, and subqueries.

The library is thoroughly tested against real instances of ClickHouse, with over 95% test coverage. Built for Python 3.9 to 3.14 with Apache Arrow and Pydantic v2. Visit the GitHub repository at https://github.com/wisrovi/wclickhouse or install via PyPI at https://pypi.org/project/wclickhouse.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Your Next.js API route is public—even if your UI isn’t.

Hiding a form behind a client-side condition doesn't make its API route private. Unless the route enforces its own checks, another client can call it directly.

  • Public API routes in Next.js are accessible even if UI is not visible.
  • Unauthorized data submission possible via direct URL access.
  • FCaptcha provides server-side form verification solution.

No more messy f-strings: Type-safe fluent SQL for ClickHouse.

No more messy f-strings: Type-safe fluent SQL for ClickHouse. Day 08 of the WClickHouse Open-Source Engineering Series. Building dynamic analytical queries by stitching f-strings together is an…

  • Introduces QueryBuilder for type-safe, fluent SQL in ClickHouse
  • Chained API methods (table(), select(), etc.) build queries naturally
  • Automatic injection protection with escaped, validated parameters

More from Monday 28 September →