sql-injection

bool run_query(sqlite3* db, const std::string& sql, std::vector< user_record >& records) { // clear any prior results records.clear(); char* error_message; if(sqlite3_exec(db, sql.c_str(), callback, &records, &error_message) != SQLITE_OK) {...