Python flask how can i insert a variable in LIKE sql

Question

Im struggeling on this problem with excuting sql in my flask python app.

Im trying to excecute a like function with a variable that im recieving from my get reqs.

for example i've tried this yet :

rows = cursor.execute(f"SELECT * FROM vragen WHERE vraag LIKE ':text'",
                      {"text": '%' + query + '%'}).fetchall()

but this gives me an empty array unfortunately.

This gives me data but then im not using a variable which i need in this case.

rows = cursor.execute(f"SELECT * FROM vragen WHERE vraag LIKE '%which%'").fetchall()

Does anyone know an easy to way to solve this?

Thanks for advance

The format for Python's f-strings is f"This is an f-string {var_name} and {var_name}.". You should also be very wary of f-strings going directly into SQL queries, as this answer points out — Harrison
– Harrison, Commented Nov 29, 2022 at 17:35

Booboo · Accepted Answer · 2022-11-25 12:31:47Z

1

You shouldn't have quotes around :text:

rows = cursor.execute(f"SELECT * FROM vragen WHERE vraag LIKE :text",
                      {"text": '%' + query + '%'}).fetchall()

answered Nov 25, 2022 at 12:31

Booboo

45.7k4 gold badges46 silver badges74 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1