From dc8a3d0c2d5cf472e866c7a33434016fbbc5bb64 Mon Sep 17 00:00:00 2001 From: Tulir Asokan Date: Wed, 5 Jan 2022 01:53:57 +0200 Subject: [PATCH] Don't use parameters for pg_constraint query --- mautrix_telegram/db/upgrade/v01_initial_revision.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mautrix_telegram/db/upgrade/v01_initial_revision.py b/mautrix_telegram/db/upgrade/v01_initial_revision.py index 49e9ead8..3057e7db 100644 --- a/mautrix_telegram/db/upgrade/v01_initial_revision.py +++ b/mautrix_telegram/db/upgrade/v01_initial_revision.py @@ -43,9 +43,9 @@ async def upgrade_v1(conn: Connection, scheme: str) -> None: async def drop_constraints(conn: Connection, table: str, contype: str) -> None: q = ( "SELECT conname FROM pg_constraint con INNER JOIN pg_class rel ON rel.oid=con.conrelid " - "WHERE rel.relname=$1 AND contype=$2" + f"WHERE rel.relname='{table}' AND contype='{contype}'" ) - names = [row["conname"] for row in await conn.fetch(q, table, contype)] + names = [row["conname"] for row in await conn.fetch(q)] drops = ", ".join(f"DROP CONSTRAINT {name}" for name in names) await conn.execute(f"ALTER TABLE {table} {drops}")