> -------- Original Message --------
> Subject: Re: [sqlite] SQL syntax possibilities
> From: Eric Bohlman <[EMAIL PROTECTED]>
> Date: Wed, November 16, 2005 10:54 am
> To: [email protected]
> 
> [EMAIL PROTECTED] wrote:
> > uSQLite does not (generally) enter into the details of the query it is
> > passed. There is however an exception for security. uSQLite requires a
> > login and (depending on the user and network) assigns the user a level:
> > 
> > 0: No access
> > 1: Select only
> > 2: Update/Insert only
> > 3: Select/Update/Insert only
> > 4: Power user
> > 
> > These rules are enforced by looking at the first word in a query, the
> > code is at the bottom of this post. My problem is that I allow multiple
> > queries to be concatented, and this is a useful feature for bulk inserts
> > and blocks of queries that must be executed atomicaly (Major hangup is
> > level 2 for remote updates inserts). However, with the present routine
> > I could do eg:
> 
> I think you should look into using SQLite's authorizer callback 
> mechanism; that way you don't have to parse syntax.

Yup. Will do.
Thanks.

(Repeat after me RTFM, RTFM,RTFM...........)


Reply via email to