[IMP] Prevent SQL Injections

[arbaes]

Using python formatting to build SQL instructions is very insecure.
Also added .db files in .gitignore

[eibex]

Thanks! Apologies for not being aware of this.

[arbaes]

My bad too, I should have told you sooner, but you're too fast for me :D

Also, small fix is coming

[eibex]

Sorry, too much time on my hands due to COVID-19 :P

[eibex]

Do the commas after, for example, message_id serve a purpose or can I delete them? I do not see examples in the sqlite3 library using trailing commas.

[arbaes]

Yes, it's for forcing tuples

[arbaes]

By the way, this is not the proper way to proceed, that why we use Primary Keys

[arbaes]

I think I will not have time to do another PR soon, so here's a more few remarks if you have time.

• I noticed you never consider that your transactions/connections could fail, you can use try-catch with sqlite3.Error
• It's a better practice to close your connection,cursor when working with DB. I read in this case it's not a big problem as far as a single process is using the connection. But letting a cursor open could lead into memory leaks.
• There should be also some sort of conventions while working with a db. In your code, database is actually a connection, while db is actually the database cursor.

I suggest you to read This guide, it will explain better than me :)

[eibex]

Thanks, I will study it this week.

I barely ever worked with SQL queries beforehand, sorry!

[arbaes]

No need for excuses, I just wanted to give you some insights :)