Run code inside a string with python .format

Question

I need to use code saved in a string (tmp_str) inside .format ?

tmp_str="ID='ID_VAR_DICT'"
    
sql_text="SELECT FIELD FROM TABLE_A WHERE ID = {ID}"
sql_query = sql_text.format(ID='ID_VAR_DICT')
print ('sql_query -->',sql_query) #Print A
    
sql_query = sql_text.format(eval(tmp_str))
print ('sql_query -->',sql_query) #Print B

Basically I need #Print B to output the same as #Print A but passing the contents off tmp_str to .format

Output:

('sql_query -->', 'SELECT FIELD FROM TABLE_A WHERE ID = ID_VAR_DICT')
Traceback (most recent call last):
  File "_testes.py", line 7, in <module>      
    sql_query = sql_text.format(eval(tmp_str))
  File "<string>", line 1
    ID='ID_VAR_DICT'

Thanks in advance, M

Do not use string formatting to create SQL queries. Do something like cursor.execute('SELECT FIELD FROM TABLE_A WHERE ID=?', ('ID_VAR_DICT',)). — chepner
– chepner, Commented Mar 1, 2022 at 17:55

Barmar · Accepted Answer · 2022-03-01 18:00:00Z

1

This isn't a recommendation -- as chepner says in a comment, you should use a prepared statement with parameters.

But if you really need to do it your way, you have to eval the entire expression, not just the argument.

sql_query = eval(f'sql_text.format({tmp_str})')

answered Mar 1, 2022 at 18:00

Barmar

789k57 gold badges554 silver badges669 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Run code inside a string with python .format

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related