Prevent SQL Injection With Validation

HardPython00:00

Practice interviewer

In session

5 left

00:00

Your question is Prevent SQL Injection With Validation. Start with the requirements on the right.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

You need to log in / sign up to run or submit.

Problem

Write a function to validate input data to prevent SQL injection.

Implement validate_input(data), where data is a list of filter dictionaries. Return True only when every filter has an allowed field, operator, and correctly typed value. Reject malformed structures, unsupported values, control characters, and common SQL injection delimiters or comment markers. The validator must accept ordinary apostrophes in names, such as O'Reilly.

Contract

data is a JSON-compatible list. Each item must contain exactly field, operator, and value. Return a boolean.

Constraints

data must be a JSON-compatible list
0 <= len(data) <= 20
Each condition must contain exactly field, operator, and value
Allowed fields are id, name, and status
Allowed operators are =, !=, <, and >
ID values are integers from 0 through 20
Name values are strings from 1 through 100 characters
Status values are active, inactive, or pending

Function Signature

def validate_input(data):

Your solutionPython 3

You need to log in / sign up to run or submit.

Run your code to see test output