>>12 Exercise. Find the security hole common to these two functions.
Yes, there's a big, giant ``USE THIS FOR FOR BLAG IT'S SECURE AND ALL. I GUARANTEE IT.'', beginners surely will use it now that they know it's so secure!
This is called an SQL injection attack. It can be resolved by using prepared statements that let SQLite do the proper quoting for us. Refer to the SQLite package documentation for usage.
Yes, they don't provide any useful information for prevent the sql injection!