SQLite parameter substitution and quotes

前端 未结 6 1061
爱一瞬间的悲伤
爱一瞬间的悲伤 2020-11-28 14:41

I have this line that works OK:

c.execute(\'select cleanseq from cleanseqs WHERE newID=\"%s\"\'%name)

But I want to use SQLite parameter su

6条回答
  •  情深已故
    2020-11-28 15:10

    The library will handle quoting and escaping for you. Simply write your query like this:

    c.execute('SELECT cleanseq FROM cleanseqs WHERE newID=?', (name,))
    

提交回复
热议问题