Use Python variable in a MySQL Subquery

Question

team = input("Enter the team name: ")

cursor = db.cursor()

sql = "SELECT * FROM `flash_data_archive` WHERE `event_id` IN (SELECT `alternate_id` from `event_list` where `category` = %s)" % team 

cursor.execute(sql)

What is the correct notation to have the the string the user entered for 'team' to be used for the category field in the sql subsuery?

Explosion Pills · Accepted Answer · 2013-04-09 04:13:09Z

3

Remove the % team from the string. Instead, it should be an argument to .execute.

cursor.execute(sql, team)

This will properly escape it.

answered Apr 9, 2013 at 4:13

Explosion Pills

192k56 gold badges341 silver badges417 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Use Python variable in a MySQL Subquery

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related