Struct UpdateQuery 

pub struct UpdateQuery { /* private fields */ }

UPDATE query builder

Implementations

impl UpdateQuery

pub fn new() -> Self

Create an empty UPDATE query

pub fn table(self, table: &str) -> Self

Set the target table

pub fn set(self, column: &str, value: &str) -> Self

Add a SET assignment (value should be an already-escaped SQL literal)

pub fn sets(self, pairs: &[(&str, &str)]) -> Self

Batch add SET assignments

pub fn where_clause(self, condition: &str) -> Self

Add a WHERE condition

Security (v0.2.2 fix C-6)

Calls check_where_injection to detect high-risk patterns.

pub fn where_eq(self, column: &str, value: Value) -> Self

Add a column = ? AND condition (P0 fix: parameterized binding)

pub fn where_ne(self, column: &str, value: Value) -> Self

Add a column <> ? AND condition

pub fn where_gt(self, column: &str, value: Value) -> Self

Add a column > ? AND condition

pub fn where_ge(self, column: &str, value: Value) -> Self

Add a column >= ? AND condition

pub fn where_lt(self, column: &str, value: Value) -> Self

Add a column < ? AND condition

pub fn where_le(self, column: &str, value: Value) -> Self

Add a column <= ? AND condition

pub fn where_like(self, column: &str, pattern: Value) -> Self

Add a column LIKE ? AND condition

pub fn where_in(self, column: &str, values: Vec<Value>) -> Self

Add a column IN (?, ?, ...) AND condition

pub fn where_between(self, column: &str, low: Value, high: Value) -> Self

Add a column BETWEEN ? AND ? AND condition

pub fn where_null(self, column: &str) -> Self

Add a column IS NULL AND condition

pub fn where_not_null(self, column: &str) -> Self

Add a column IS NOT NULL AND condition

pub fn returning(self, columns: &[&str]) -> Self

Set the RETURNING clause (supported by PostgreSQL/SQLite 3.35+)

Returns the new values of specified columns after UPDATE. MySQL does not support RETURNING; it is ignored in build() (MySQL style) and under MySQL dialect in build_with_dialect().

pub fn returning_all(self) -> Self

Set RETURNING * (return all columns)

pub fn build(self) -> String

Generate SQL

Security (gate 9 fix)

Table and column names are escaped via quote_ident() and wrapped in backticks, preventing malicious identifiers containing ` from breaking out.

pub fn build_with_dialect(self, db_type: DbType) -> String

Generate SQL for the specified dialect

pub fn build_with_params(self, db_type: DbType) -> BuiltQuery

Generate parameterized SQL (parameterized query, P0 fix: SQL injection prevention)

WHERE conditions can come from parameterized APIs like where_eq/where_in/where_between, with user input bound as parameters rather than string concatenation. Note: SET values are still raw strings; for parameterized SET, use the ORM’s save() interface.

Trait Implementations

impl Clone for UpdateQuery

fn clone(&self) -> UpdateQuery

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UpdateQuery

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for UpdateQuery

fn default() -> UpdateQuery

Returns the “default value” for a type.