https://github.com/keegancsmith/sqlf

sqlf generates parameterized SQL statements in Go, sprintf style
https://github.com/keegancsmith/sqlf

go golang sprintf-style sql

Last synced: 3 days ago
JSON representation

sqlf generates parameterized SQL statements in Go, sprintf style

• Host: GitHub
• URL: https://github.com/keegancsmith/sqlf
• Owner: keegancsmith
• License: mit
• Created: 2016-05-16T19:01:04.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2023-08-18T06:45:50.000Z (about 1 year ago)
• Last Synced: 2024-08-03T23:30:34.310Z (3 months ago)
• Topics: go, golang, sprintf-style, sql
• Language: Go
• Homepage:
• Size: 16.6 KB
• Stars: 127
• Watchers: 6
• Forks: 8
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-golang-repositories - sqlf

README

        
sqlf [![Build Status](https://travis-ci.org/keegancsmith/sqlf.svg?branch=master)](https://travis-ci.org/) [![GoDoc](https://godoc.org/github.com/keegancsmith/sqlf?status.svg)](https://godoc.org/github.com/keegancsmith/sqlf)

======

Generate parameterized SQL statements in Go, sprintf Style.

```go

q := sqlf.Sprintf("SELECT * FROM users WHERE country = %s AND age > %d", "US", 27);

rows, err := db.Query(q.Query(sqlf.SimpleBindVar), q.Args()...) // db is a database/sql.DB

```

`sqlf.Sprintf` does not return a string. It returns `*sqlf.Query` which has

methods for a parameterized SQL query and arguments. You then pass that to

`db.Query`, `db.Exec`, etc. This is not like using `fmt.Sprintf`, which could

expose you to malformed SQL or SQL injection attacks.

`sqlf.Query` can be passed as an argument to `sqlf.Sprintf`. It will "flatten"

the query string, while preserving the correct variable binding. This allows

you to easily compose and build SQL queries. See the below examples to find

out more.

```go

// This is an example which shows off embedding SQL, which simplifies building

// complicated SQL queries

name := "John"

age, offset := 27, 100

where := sqlf.Sprintf("name=%s AND age=%d", name, age)

limit := sqlf.Sprintf("%d OFFSET %d", 10, offset)

q := sqlf.Sprintf("SELECT name FROM users WHERE %s LIMIT %s", where, limit)

fmt.Println(q.Query(sqlf.PostgresBindVar))

fmt.Println(q.Args())

// Output: SELECT name FROM users WHERE name=$1 AND age=$2 LIMIT $3 OFFSET $4

// [John 27 10 100]

```

Another common task is joining conditionals with `AND` or `OR`. sqlf

simplifies this task with `sqlf.Join`:

```go

// Our inputs

minQuantity := 100

nameFilters := []string{"apple", "orange", "coffee"}

var conds []*sqlf.Query

for _, filter := range nameFilters {

	conds = append(conds, sqlf.Sprintf("name LIKE %s", "%"+filter+"%"))

}

subQuery := sqlf.Sprintf("SELECT product_id FROM order_item WHERE quantity > %d", minQuantity)

q := sqlf.Sprintf("SELECT name FROM product WHERE id IN (%s) AND (%s)", subQuery, sqlf.Join(conds, "OR"))

fmt.Println(q.Query(sqlf.PostgresBindVar))

fmt.Println(q.Args())

// Output: SELECT name FROM product WHERE id IN (SELECT product_id FROM order_item WHERE quantity > $1) AND (name LIKE $2 OR name LIKE $3 OR name LIKE $4)

// [100 %apple% %orange% %coffee%]

```

See https://godoc.org/github.com/keegancsmith/sqlf for more information.