Part of this is done and all that is left is to read the database and send the link to the user. But SQL probably has a lot of problems: like injecting SQL

CodeFactor found an issue: Possible binding to all interfaces.

It's currently on:
app\main.py:143

Maybe write better code for SQL. The following problems may occur:

• Security problem
• Speed problem

CodeFactor found an issue: Possible SQL injection vector through string-based query construction.

It's currently on:
app\modules.py:68
Commit 71c1f47

CodeFactor found an issue: Multiple consecutive RUN instructions. Consider consolidation.

It's currently on:
Dockerfile:4

Possible binding to all interfaces.

Binding to all network interfaces can potentially open up a service to traffic on unintended interfaces, that may not be properly documented or secured. This rule looks for a string pattern 0.0.0.0 that may indicate a hardcoded binding to all network interfaces.

Example of insecure code:

s.bind(('0.0.0.0', 8080))
Example of secure code:

s.bind(('192.168.0.1', 8080))

Further Reading

• Bandit - B104: hardcoded_bind_all_interfaces

CodeFactor found an issue: Possible SQL injection vector through string-based query construction.

It's currently on:
app\modules.py:88
Commit 71c1f47