Cannot run a single MySQLdb execute....

Chris Angelico rosuav at gmail.com
Thu Mar 28 00:26:48 EDT 2013


On Thu, Mar 28, 2013 at 3:18 PM, Νίκος Γκρ33κ <nikos.gr33k at gmail.com> wrote:
> Τη Πέμπτη, 28 Μαρτίου 2013 6:08:28 π.μ. UTC+2, ο χρήστης Chris Angelico έγραψε:
>
>> As it says in that document, paramstyle is a top-level module
>> attribute. Try printing it out. See what it says. Then match your code
>
> sql = '''SELECT hits FROM counters WHERE url = %s''' % page
> print( sql )
> cur.execute( sql )
>
> Now the error says:
>
> _mysql_exceptions.OperationalError: (1054, "Unknown column 'index.html' in 'where clause'") as you cna see at my webpage

http://www.facepalm.de/

Do you understand SQL injection attacks and the concept of
parameterized queries?

ChrisA



More information about the Python-list mailing list