On Oct 26, 2017, at 12:15 AM, David Barrett <[email protected]> wrote:
> 
> I'm glad you liked it!  I'd be happy to answer any questions you have about
> http://BedrockDB.com, our use of sqlite, or anything else.  Thanks for
> listening!

Before I get to the questions, I haven’t listened to the FLOSS episode yet, so 
please forgive me if these were asked and answered on the podcast.  Just tell 
me if so, because I will eventually get to it.

1. I don’t see a C API.  If so, that means it’s up to the caller to handle 
quoting and escaping properly to avoid inadvertently creating SQL injection 
vulnerabilities.  Is that true, and if so, is there a plan to solve it?  I 
don’t mind running my queries through an HTTP[-ish] layer, but getting quoting 
and escaping right in hand-written code is a big source of errors I’d rather 
not return to.

2. No DBD::BedrockDB yet, I see.  When? :)

3. What happens if a local program attaches to the SQLite DB and queries it in 
the face of active replication?

4. What happens if a local program *inserts* data via the SQLite interface?  
Does the data get replicated, or does that happen only if you insert via port 
8888?

5. I think your web pages answer this one implicitly, but let me ask just to be 
sure I’m guessing right: Does the MySQL API smooth out any of the semantic and 
language differences between MySQL and SQLite, or must you simply give 
SQLite-compatible queries over the MySQL interface?  (Expected answer: “No.”)

6. What MySQL API version are you compatible with?  As maintainer of MySQL++, I 
can tell you, there is not just one version. :)

7. Does using your MySQL API solve problem #1?  That is, if you use one of the 
available ways for constructing guaranteed-sound queries via libmysqlclient or 
one of the many libraries built atop it, does BedrockDB get the benefit?

8. Does your MySQL API solve problem #2?  That is, have you tested it against 
DBD::mysql?

I think that’s enough for now. :)
_______________________________________________
sqlite-users mailing list
[email protected]
http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to