zlacker

duckDB is what sql should be in 2024

https://duckdbsnippets.com/

>>abelch+(OP)
The very first example on that page is vulnerable to injection.

>>xigoi+lf1
Which one?

>>richbe+4U1

  #!/bin/bash 
  function csv_to_parquet() {     
      file_path="$1"     
      duckdb -c "COPY (SELECT * FROM read_csv_auto('$file_path')) TO '${file_path%.*}.parquet' (FORMAT PARQUET);" }

>>xigoi+eW1
Eh, in the context of the site and other snippets that seems pedantic.

Could it be run on untrusted user input? Sure. Does it actually pose a threat? It's improbable.