influxdb-java icon indicating copy to clipboard operation
influxdb-java copied to clipboard

BoundParameterQuery on SELECT and FROM parameters

Open Santobert opened this issue 4 years ago • 0 comments

There was an issue in 2019 regarding this problem: https://github.com/influxdata/influxdb-java/issues/615 This issue was closed because binding parameters other than WHERE was not possible according to the documentation at the time. It seems this part of the documentation was changed recently: https://docs.influxdata.com/influxdb/v1.8/tools/api/#bind-parameters

The API supports binding parameters to particular field values or tag values. Use the syntax $<placeholder_key> as a placeholder in the query, and URL encode the map of placeholder keys to placeholder values in the request body. This allows all InfluxQL queries where the value is customizable - such as field values, function names, or intervals - to be represented using bind parameters.

Are there any plans to allow binding parameters in SELECT and FROM clauses? Am I right that there is currently no way to protect SELECT and FROM clauses against injection?

Santobert avatar Oct 29 '21 12:10 Santobert