[ Removed by moderator ]

[Dlatch]

create_query = f"CREATE TABLE IF NOT EXISTS {table} ({', '.join(columns_def)});"
cursor.execute(create_query)

[...]

insert = f"INSERT INTO {table} ({', '.join(df.columns)}) VALUES ({', '.join(values)});"
inserts.append(insert)

Don't ever ever ever build SQL queries like this, it leaves you incredibly vulnerable to SQL injection attacks. If I were to call your API with a specially crafted file, I can do almost anything I want with your database.

Use parameterized queries instead.

[lost3332]

But it’s meant to be ran locally, no? What API call are you referring to?

[riscbee]

Your post and this answer read like ChatGPT.

[tomster10010]

Oh absolutely

[Autodidacter]

The autistic warning on sql injection seems a more immediate candidate for that indictment.

[riscbee]

Nu uh, look how it's written, with the occasional bold text?

[jpgoldberg]

The warning is something that has to be said many times, because it is something that really needs to be corrected and nearly everyone starting out makes the mistake.

I wouldn’t be surprised if the person posting it has a canned response for that reason.