Programming Error in python, How do I parse values of a tuple in a table with SQL query?

Question

In order to parse the values of variables a and b in the field username and password respectively of table admin_details I tried this method the pseudo code is something like below:

...
...
a=4
b=8
....
....
cur.execute("INSERT INTO admin_details(username, password)  VALUES('%s','%s'), %(a,b)")
....

I get the value inserted in the table as
username: 4
password:8

But in order to insert the characters like**
a=' john'
b='snow'
in the admin_details field. I tried using tuples as below

a='john'
b='snow'
tup=['a','b']

and to insert this tuple's value a and b in the table i tried all the possible ways but still I am not able to store the variables in the table.

cur.execute("INSERT INTO admin_details(username, password)  VALUES('%s','%s'), % ['a','b']")

But I get this

_mysql_exceptions.ProgrammingError: (1064, "You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'INTO INTO admin_details(username) VALUES('%s'), %('entry1.get()')' at line 1")

Community · Accepted Answer · 2017-05-23 11:45:54Z

2

Do not attempt to use string formatting for constructing SQL queries. Pass query parameters in the second argument to execute() - this way you'll protect yourself against sql injection problems:

a = 'john'
b = 'snow'
cur.execute("INSERT INTO admin_details(username, password) VALUES(%s, %s)", (a, b))

Note that in this case you also don't need quotes around the placeholders in the query.

Comments

lqhcpsgbl · Accepted Answer · 2015-01-10 08:20:27Z

1

I think use this way to insert mysql data should be better:

insert_sql = 'INSERT INTO admin_details(username, password)  VALUES("{0}","{1}")'.format(*tup)
cur.execute(insert_sql)
conn.commit()

answered Jan 10, 2015 at 8:20

lqhcpsgbl

3,8023 gold badges23 silver badges30 bronze badges

Collectives™ on Stack Overflow

Programming Error in python, How do I parse values of a tuple in a table with SQL query?

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related