Struct BuiltQuery 

pub struct BuiltQuery {
    pub sql: String,
    pub params: Vec<Value>,
}

Parameterized query construction result

Contains a SQL string with ? placeholders and a list of parameters bound in order.

Security (P0 fix: SQL injection prevention)

Through parameterized binding, user input is separated from the SQL structure, eliminating SQL injection at the root. Callers should use build_with_params() instead of string-concatenated where_clause(), especially when WHERE condition values come from untrusted input.

Fields

sql: String

SQL statement with ? placeholders

params: Vec<Value>

List of parameters bound in order of appearance

Implementations

impl BuiltQuery

pub fn into_parts(self) -> (String, Vec<Value>)

Extract the SQL and parameters parts

Trait Implementations

impl Clone for BuiltQuery

fn clone(&self) -> BuiltQuery

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BuiltQuery

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for BuiltQuery

fn default() -> BuiltQuery

Returns the “default value” for a type.