Updated: 2021/Dec/3
SQLITE3_ENABLE_LOAD_EXTENSION(3) Library Functions Manual NAME sqlite3_enable_load_extension - Enable Or Disable Extension Loading SYNOPSIS int sqlite3_enable_load_extension(sqlite3 *db, int onoff); DESCRIPTION So as not to open security holes in older applications that are unprepared to deal with extension loading, and as a means of disabling extension loading while evaluating user-entered SQL, the following API is provided to turn the sqlite3_load_extension() mechanism on and off. Extension loading is off by default. Call the sqlite3_enable_load_extension() routine with onoff==1 to turn extension loading on and call it with onoff==0 to turn it back off again. This interface enables or disables both the C-API sqlite3_load_extension() and the SQL function load_extension(). Use sqlite3_db_config(db,SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION,..) to enable or disable only the C-API. Security warning: It is recommended that extension loading be disabled using the SQLITE_DBCONFIG_ENABLE_LOAD_EXTENSION method rather than this interface, so the load_extension() SQL function remains disabled. This will prevent SQL injections from giving attackers access to extension loading capabilities. SEE ALSO sqlite3_db_config(3), sqlite3_load_extension(3), SQLITE_DBCONFIG_MAINDBNAME(3) NetBSD 9.99 December 19, 2018 NetBSD 9.99