Fixed SQL injection issue. Renamed main Flask entry file to app.py. Updated .gitignore file.

Author: Arjan

.gitignore

@@ -1,2 +1,3 @@
 # misc
-.DS_Store
+.DS_Store
+*.pyc

7 - dealing with errors/after-context/error-handling.py renamed to 7 - dealing with errors/after-context/app.py

@@ -43,7 +43,7 @@ def fetch_blog(id: str):
         with SQLite('application.db') as cur:
 
             # execute the query and fetch the data
-            cur.execute(f"SELECT * FROM blogs where id='{id}'")
+            cur.execute(f"SELECT * FROM blogs where id=?", [id])
             result = cur.fetchone()
 
             # return the result or raise an error

7 - dealing with errors/after-context/db.py

@@ -43,7 +43,7 @@ def fetch_blog(id: str):
         cur = con.cursor()
 
         # execute the query and fetch the data
-        cur.execute(f"SELECT * FROM blogs where id='{id}'")
+        cur.execute(f"SELECT * FROM blogs where id=?", [id])
         result = cur.fetchone()
 
         # return the result or raise an error