JSON translated into SQL by python

Chris Angelico rosuav at gmail.com
Sat Nov 23 02:35:39 EST 2013


On Sat, Nov 23, 2013 at 4:54 PM, Aaron G.
<another.human.factor at gmail.com> wrote:
> query = "INSERT INTO TABLE temp2 (enterprise) VALUES("+ str(curObservation) +");"

You just put the contents of curObservation into the query, as SQL
code. Is that really what you wanted to do? Most likely, you should be
using a parameterized query here; are you familiar with that concept?

You seem to have custom functions to do your database work here.
Without knowing what those functions do, it's hard for us to advise
further.

ChrisA



More information about the Python-list mailing list