Explain why we can safely use the SQLHander to process the SQL edit form

diff --git a/src/pgwui_sql/views/sql.py b/src/pgwui_sql/views/sql.py
index 95ccd2c1351eb316f4bd76bd308fa3e9ba6d619e..565731e5190a0e76e001d528244a08266c1ccbae 100644 (file)
--- a/src/pgwui_sql/views/sql.py
+++ b/src/pgwui_sql/views/sql.py
@@ -258,6 +258,9 @@ def sql_view(request):
              renderer='pgwui_sql:templates/sql_edit.mak')
 @auth_base_view
 def sql_edit_view(request):
+    # We don't worry about this contacting the db to execute sql
+    # because pgwui_core.core does not try to alter the db until
+    # the hidden "action" POST variable is something other than ''.
 
     uh = SQLHandler(request).init()
     response = pgwui_core.core.UploadEngine(uh).run()