From 66d25d4fa752845f5294218d275e4b5648b2ec3d Mon Sep 17 00:00:00 2001 From: "Karl O. Pinc" Date: Fri, 13 Sep 2024 13:54:36 -0500 Subject: [PATCH] Explain why we can safely use the SQLHander to process the SQL edit form --- src/pgwui_sql/views/sql.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/pgwui_sql/views/sql.py b/src/pgwui_sql/views/sql.py index 95ccd2c..565731e 100644 --- a/src/pgwui_sql/views/sql.py +++ b/src/pgwui_sql/views/sql.py @@ -258,6 +258,9 @@ def sql_view(request): renderer='pgwui_sql:templates/sql_edit.mak') @auth_base_view def sql_edit_view(request): + # We don't worry about this contacting the db to execute sql + # because pgwui_core.core does not try to alter the db until + # the hidden "action" POST variable is something other than ''. uh = SQLHandler(request).init() response = pgwui_core.core.UploadEngine(uh).run() -- 2.34.1