How do I use parameterized sql query for select statement in Python?

Question

def confirmcart():
    q=cartet.get()
    r=prodidb.get()
    import mysql.connector as sqltor
    connect=sqltor.connect(host