Prevent SQL Injection With Validation | Dataford Interview Questions

Write a function to validate input data to prevent SQL injection.

Implement validate_input(data), where data is a list of filter dictionaries. Return True only when every filter has an allowed field, operator, and correctly typed value. Reject malformed structures, unsupported values, control characters, and common SQL injection delimiters or comment markers. The validator must accept ordinary apostrophes in names, such as O'Reilly.

Contract

data is a JSON-compatible list. Each item must contain exactly field, operator, and value. Return a boolean.

Constraints

data must be a JSON-compatible list
0 <= len(data) <= 20
Each condition must contain exactly field, operator, and value
Allowed fields are id, name, and status
Allowed operators are =, !=, <, and >
ID values are integers from 0 through 20
Name values are strings from 1 through 100 characters
Status values are active, inactive, or pending

Function Signature

def validate_input(data):

Your question is Prevent SQL Injection With Validation. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem