Best way to allow a dynamic (unsafe) "run arbitrary SQL" page?

[shah]

Hi - I'd like to offer my users of a SQLPage site a page called "query.sql" which would allow them to type in some arbitrary SQL (understanding that it will be "unsafe") in a form and when the form is submitted it would execute the query they provided and return the results as a table.

If there's an example that already exists it seems my feeble search attempts have not been able to find it.
thanks!

[lovasoa]

Hello !
There is no such feature built into SQLPage itself, but you can use your database's own dynamic sql evaluation function to implement that:

1. SQLite: SQLite Dynamic SQL with the define extension
2. PostgreSQL: EXECUTE in PL/pgSQL (you can wrap it in a function)
3. MySQL: MySQL Dynamic SQL using EXECUTE
4. Microsoft SQL Server: Dynamic SQL in SQL Server using sp_executesql

see https://www.databasestar.com/dynamic-sql/