postgres escape column name in updated_at_rows query

This is necessary if, for example, the column name is not all lowercase
austinweisgrau · Oct 10, 2024 · cfc231a · cfc231a
1 parent 46cea73
commit cfc231a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/parsons/databases/postgres/postgres.py b/parsons/databases/postgres/postgres.py
@@ -127,6 +127,12 @@ def get_updated_rows(
             FROM {self.table}
             WHERE "{updated_at_column}" > %s
         """
+        parameters = []
+
+        if cutoff_value is not None:
+            sql += f'WHERE "{updated_at_column}" > %s'
+            parameters.append(cutoff_value)
+
         if chunk_size:
             sql += f" LIMIT {chunk_size}"