title: Sanitizing sqlite statements
body: <p>I have an app that allows users to create databases and play with them.</p>
  
  <p>I would like to allow them to execute arbitrary sql statements on those databases. Essentially, the app will fetch a sql statement with an EditText and throw it at the database.</p>
  
  <p>Should I restrict these statements? If so, how?</p>
  
  <p>What form a rational sanitization should I use?</p>