skip to content

Relational Access

database/sql as it actually behaves: sql.Open connects to nothing, Rows must be closed and checked, a Tx pins one connection, and the pool limits decide your tail latency.

part ofGo (Golang)overview, primer and where to startread it →
on this pageshow

explore

questions

page 2 of 2

For an ad-hoc reporting service, how much of the SQL text may be built from request input, and who owns that call?

level: principalimportance: nice to knowfreq 34%

basics

~20 s

Values are always bound and structure comes only from a closed set of fragments in the source; only that set's width is negotiable. The service lead proposes it, the security reviewer owns the policy and can refuse.

open as a page

showing 31–31 of 31