Re: QuoteSQL

Sybren Stuvel Mon, 25 Sep 2006 00:35:54 -0700

Lawrence D'Oliveiro enlightened us with:
>         "select * from details where person_name like"
>         " concat(\"%%\", %s, \"%%\")" \
>     % \
>         QuoteSQL(name, True)


Wouldn't this be a whole lot better?

cursor.execute(
    "select * from details where person_name like ?",
    '%' + name + '%'
)

Sybren
-- 
Sybren StÃ¼vel
StÃ¼vel IT - http://www.stuvel.eu/
-- 
http://mail.python.org/mailman/listinfo/python-list

Re: QuoteSQL

Reply via email to