Method analyze_statement

src/security/sql_injection_detector.rs:126–160

(
        &self,
        statement: &Statement,
        analysis: &mut SqlAnalysisResult,
        depth: usize,
        original_query: &str
    )

    }

    fn analyze_statement(
        &self,
        statement: &Statement,
        analysis: &mut SqlAnalysisResult,
        depth: usize,
        original_query: &str
    ) -> Result<(), PgSqliteError> {
        analysis.max_depth = analysis.max_depth.max(depth);

        match statement {
            Statement::Query(query) => {
                self.analyze_query_statement(query, analysis, depth + 1, original_query)?;
            }
            Statement::Insert { .. } | Statement::Update { .. } | Statement::Delete { .. } => {
                analysis.has_modifying_statements = true;
                self.analyze_dml_statement(statement, analysis, depth + 1, original_query)?;
            }
            Statement::Drop { .. } | Statement::CreateTable { .. } | Statement::AlterTable { .. } => {
                analysis.has_ddl_statements = true;
                // DDL statements in injection contexts are highly suspicious
                if depth > 0 || analysis.statement_count > 0 {
                    events::sql_injection_attempt(None, None, original_query, "suspicious DDL");
                    return Err(PgSqliteError::InvalidParameter(
                        "Suspicious DDL statement detected".to_string()
                    ));
                }
            }
            _ => {
                // Other statement types
            }
        }

        analysis.statement_count += 1;
        Ok(())
    }

    fn analyze_query_statement(
        &self,