Developer builds safe AI-powered SQL query tool using Streamlit and SQLite

·1 views

A developer has built an open-source Text-to-SQL assistant that converts natural language business questions into SQL queries without requiring users to write code manually. The project uses a hybrid architecture where a natural language interpreter generates SQL, a read-only validator blocks destructive commands, and SQLite executes only safe read operations. The tool also displays the generated SQL and an EXPLAIN QUERY PLAN output, making the process transparent and auditable. Built with Streamlit for the interface, it uses a retail sales demo database covering customers, products, orders, and order items. The project draws on guidance from LangChain's SQL agent documentation and Python's official recommendations for parameterized queries to mitigate SQL injection risks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

China-Linked Hackers Target Indian Tax Filers With Fake ITR Tools to Deploy Malware

Cybersecurity firm Seqrite Labs has uncovered a campaign, dubbed Operation DragonReturn, in which a China-nexus threat group distributes DcRAT — a remote access trojan — by impersonating India's Income Tax Department. Attackers use phishing emails and malicious links disguised as legitimate tax filing utilities, timed to coincide with India's March 31 fiscal deadline to maximise success rates. Once installed, DcRAT establishes persistence on infected systems and harvests sensitive data including credentials, browser history, and keystrokes, relaying it to attacker-controlled servers. The campaign specifically targets Indian tax professionals and corporate finance teams, who typically hold elevated access to financial records, making them valuable entry points for deeper network infiltration. The use of commodity malware-as-a-service infrastructure suggests the attackers sourced DcRAT from Chinese underground forums, where such tools are actively maintained and updated.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Supracorona Login Gate Plugin Offers Simple Site-Wide Access Control for WordPress

A developer has released Supracorona Login Gate, a lightweight WordPress plugin designed to restrict entire websites to logged-in users only. The plugin targets use cases such as staging environments, client portals, internal tools, and private documentation sites that do not require full membership systems. When enabled, logged-out visitors are redirected either to the standard WordPress login page or a custom page chosen by the site administrator. Unlike bloated membership plugins, it focuses solely on one question: whether the current visitor is authenticated. The plugin is now publicly available on WordPress.org.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Performance Test RAG Apps for Speed and Answer Quality in CI/CD

A technical guide published on DEV Community outlines a dual-gate approach to performance testing Retrieval-Augmented Generation (RAG) applications. Traditional load testing tools like k6 can measure response times but fail to detect hallucinations, where a model returns fast yet factually incorrect answers. The guide recommends pairing k6 for latency metrics — including Time to First Token and inter-token latency — with DeepEval, which uses an LLM-as-judge method to score faithfulness and answer relevancy. Both testing layers are integrated into a GitHub Actions CI/CD pipeline, enabling automatic regression detection on every pull request before code reaches production. The approach addresses a core weakness in conventional API testing: a RAG system can appear performant while silently generating unreliable, fabricated responses.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study: AI writes Ruby well but struggles to navigate large, complex codebases

A developer tested AI agents across 13 real Ruby codebases to assess whether Ruby and Rails are truly the most AI-friendly stack. The research distinguished between two skills: reading code locally versus navigating structural dependencies across files. In small, well-organized Rails repos, AI agents performed strongly even without extra tooling, supporting the stack's AI-friendly reputation. However, in larger, more complex codebases with scattered dependencies and polymorphic patterns, baseline AI recall dropped as low as 0.24 without a structural map to assist navigation. The findings suggest the claim holds for writing and reading Ruby, but breaks down for dependency navigation at scale.

0 comments Read more at DEV Community