Can someone tell me what is going on here? - Cloudflare Developers

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

HexF

HHexF Can someone tell me what is going on here?

chientrm.com

C

chientrm.com•1/21/24, 1:44 PM

https://tenor.com/view/doug-maclean-nhl-hockey-stats-statistics-gif-13408391465163304912

Tenor

HexF

H

HexFOP•1/21/24, 1:44 PM

sqlite locally says otherwise

HexF

H

HexFOP•1/21/24, 1:49 PM

but BigInt?

HexF

H

HexFOP•1/21/24, 1:51 PM

yeah ok, that seems kinda annoying tho

Oom Hey guys do you pass --d1 flag and use wrangler.toml file togather in pages proj...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:47 PM

You aren't really supposed to use wrangler.tomlwrangler.toml in Pages at all. The fact that it kind of works is a bug

Oom Imagine i have a project setup in a cloudflare pages and d1 configured.. if I wa...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:48 PM

As for this one, it will start a clean DB(if you don't already have a DB in your .wrangler.wrangler folder). You can use Nora's D1 Tool to pull a copy of your D1 DB down, which can then be used locally

Oom But it is mentioned in d1 docs for how to use it locally with pages 😔 that's wh...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:49 PM

Can you link that?

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:50 PM

Oh, ok. That is cursed

Oom How do I apply migration than? Like if i don't use toml.. just by passing flag d...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:53 PM

You shouldn't need a --d1--d1 flag to run migrations/commands...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:53 PM

It should look like

wrangler d1 execute YOUR_DATABASE_NAME --local --command "CREATE TABLE IF NOT EXISTS users ( user_id INTEGER PRIMARY KEY, email_address TEXT, created_at INTEGER, deleted INTEGER, settings TEXT);"

wrangler d1 execute YOUR_DATABASE_NAME --local --command "CREATE TABLE IF NOT EXISTS users ( user_id INTEGER PRIMARY KEY, email_address TEXT, created_at INTEGER, deleted INTEGER, settings TEXT);"

Pages or not

Oom How do I pass a SQL file like.

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:58 PM

wrangler d1 execute YOUR_DATABASE_NAME --local --file something.sql

wrangler d1 execute YOUR_DATABASE_NAME --local --file something.sql

Oom --d1 is so that i can access the binding in workers and toml is for applying mi...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 4:59 PM

Try --d1 BINDING=ID--d1 BINDING=ID

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 5:00 PM

Maybe...

Hello, I’m Allie!

H

Hello, I’m Allie!•1/21/24, 5:01 PM

for convergence

Oom This guy have exact problem i have.. i am using remix.. seems similar to me http...

chientrm.com

C

chientrm.com•1/21/24, 5:18 PM

maybe try wrangler-proxywrangler-proxy to bring D1 to your local dev

https://github.com/chientrm/wrangler-proxy

GitHub

GitHub - chientrm/wrangler-proxy: Wrangler Proxy exposes Workers AP...

Wrangler Proxy exposes Workers API to outside and integrate to your favorite frameworks. Compatible with DrizzleORM. - GitHub - chientrm/wrangler-proxy: Wrangler Proxy exposes Workers API to outsid...

robert.zaremba

R

robert.zaremba•1/22/24, 3:14 PM

Hi, I'm planning to use cloudflare workers for my next project. Currently researching d1d1.

Do I get it right... the database limit is only 2GB? https://developers.cloudflare.com/d1/platform/limits/
What is a recommended way to perform DB migrations?

Limits · Cloudflare D1 docs

Many of these limits will increase during D1’s public beta. Join the #d1-beta channel in the Cloudflare Developer Discord or subscribe to D1’s public …

robert.zaremba

Rrobert.zaremba Hi, I'm planning to use cloudflare workers for my next project. Currently resear...

Victor

V

Victor•1/22/24, 3:31 PM

That is the limit in beta, but it will go up. The base included in workers paid is 5gb, then charged every gig after. Up in this thread d1-database Matt mentioned about a (currently TBA, but planned for an eventual) >100GB limit

robert.zaremba

Rrobert.zaremba Hi, I'm planning to use cloudflare workers for my next project. Currently resear...

Max (@rozenmd)

M

Max (@rozenmd)•1/22/24, 3:44 PM

For larger databases, Hyperdrive is probably going to be a better fit: https://developers.cloudflare.com/hyperdrive/

josh

J

josh•1/22/24, 8:21 PM

Can someone explain the reasoning behind why a wrangler.tomlwrangler.toml file is required for local development of a D1 database? I'm trying to run some migrations, but it's not working unless I create the file. I don't quite get why it's needed when the only thing required for local development is the binding.

[[d1_databases]]
binding = "DB"
database_id = "<can_be_any_string>"
database_name = "<can_be_any_string>"
preview_database_id = "DB"

[[d1_databases]]
binding = "DB"
database_id = "<can_be_any_string>"
database_name = "<can_be_any_string>"
preview_database_id = "DB"

The above is exactly what I have in the file now. I'm trying to run the following: npx wrangler d1 migrations apply DB --localnpx wrangler d1 migrations apply DB --local

kian

K

kian•1/22/24, 9:49 PM

When you say dev environment, do you mean wrangler devwrangler dev?

Cyb3r-Jak3

C

Cyb3r-Jak3•1/22/24, 9:55 PM

Does wrangler tailwrangler tail show anything?

Ping for toast

P

Ping for toast•1/23/24, 1:51 PM

I am curious about the implementation details of D1. I am seriously considering a model where

Each user gets their own SQLite database
Each user, if they so wish, can arbitrarily query the database
Giving each user their own sqlite database has many advantages
Trivial to monitor storage usage of users
Trivial to delete all user's data
Users can hopefully have data autonomy in the sense they can just download all their data
But I am curious about the security concerns of this. I haven't found anything saying to what degree sqlite is protected against sql injection escaping the database. Obviously, the D1 team must be very familiar with this problem so I just thought I would ask, I understand if you aren't at liberty to discuss the implementation details of D1

robert.zaremba

R

robert.zaremba•1/23/24, 1:59 PM

Is there any sqlite extension enabled by D1 to do geospatial queries? I need to be able to search events "near my location".

Denver James Duran

D

Denver James Duran•1/23/24, 3:15 PM

Quick question guys, does cloudflare D1 doesn't support math functions? like floor()
https://www.sqlite.org/lang_mathfunc.html#floor

Ping for toast

PPing for toast I am curious about the implementation details of D1. I am seriously considering ...

Max (@rozenmd)

M

Max (@rozenmd)•1/23/24, 4:02 PM

D1 doesn't know ahead of time which of your users should be able to query which databases - that's up to your application code to decide

Max (@rozenmd)

MMax (@rozenmd)D1 doesn't know ahead of time which of your users should be able to query which ...

Ping for toast

P

Ping for toast•1/23/24, 4:02 PM

I'm more asking if D1's backend has protections (and if so, what) against SQLite vulnerabilities allowing the SQL environment to be escaped, or if it's simply assumed SQLite is secure

Ping for toast

PPing for toast I'm more asking if D1's backend has protections (and if so, what) against SQLite...

Max (@rozenmd)

M

Max (@rozenmd)•1/23/24, 4:04 PM

we definitely haven't assumed sqlite is secure

: https://github.com/cloudflare/workerd/blob/main/src/workerd/util/sqlite.c%2B%2B#L713

Max (@rozenmd)

MMax (@rozenmd)we definitely haven't assumed sqlite is secure 😅 : https://github.com/cloudflar...

Ping for toast

P

Ping for toast•1/23/24, 4:05 PM

Oh, this is incredible, the same thing you are running in production I assume?

Max (@rozenmd)

M

Max (@rozenmd)•1/23/24, 4:05 PM

workerd can lag by a day or so, but yes

Max (@rozenmd)

MMax (@rozenmd)workerd can lag by a day or so, but yes

Ping for toast

P

Ping for toast•1/23/24, 4:05 PM

Thank you for open sourcing this, it's unbelievably helpful

Ping for toast

PPing for toast Thank you for open sourcing this, it's unbelievably helpful

kenton

K

kenton•1/23/24, 8:09 PM

FWIW, SQLite is designed to be secure, as it is used extensively in many places where such security is needed. For instance, Google Chrome has long given arbitrary web sites the ability to store data in sqlite databases via the WebSQL API (although this API has been deprecated due to inability to achieve standardization). The library is extensively fuzzed. There have been some security vulnerabilities over the years, but far fewer than, say, V8. You should of course carefully read https://www.sqlite.org/security.html .