Strings: double versus single quotes

[HÜSEYİN KOÇ]

Çok fazla mail geliyor abonelik iptal için ne yapmam gerekiyor

Android için Outlook<https://aka.ms/ghei36>'u edinin

________________________________
From: Python-list <python-list-bounces+genc061907=hotmail.com at python.org> on behalf of Frank Millman <frank at chagford.com>
Sent: Sunday, May 24, 2020 11:41:36 AM
To: python-list at python.org <python-list at python.org>
Subject: Re: Strings: double versus single quotes

On 2020-05-24 9:58 AM, DL Neil via Python-list wrote:
> On 24/05/20 5:43 PM, Frank Millman wrote:
>> On 2020-05-23 9:45 PM, DL Neil via Python-list wrote:
>>>
>>> My habit with SQL queries is to separate them from other code, cf the
>>> usual illustration of having them 'buried' within the code,
>>> immediately before, or even part of, the query call.
>>>
>>
>> I like that idea, as I find that I am embedding more and more SQL in
>> my code.
>>
>> How do you handle parameters? Do you leave placeholders ('?' or '%s')
>> in the query, and leave it to the 'importer' of the query to figure
>> out what is required?
>
>
> Yes. Most "connector" software includes a feature which auto-magically
> escapes all variable-data - a valuable safety feature!
>
> I've been experimenting by going further and providing app.devs with
> functions/methods, a mini-API if you will. Given that many?most don't
> like having to deal with SQL, the extra 'insulation' boosts my personal
> popularity...
> (and I need as much of that as I can get!)

Ok. I will have to give it some thought.

I generate most of my SQL dynamically, constructing the query
programmatically using the meta-data in my system.

But now I am constructing some more complex queries, which I can't
generate automatically yet. I am hoping that a pattern emerges which I
can use to automate them, but for now I am doing it by hand.

There are a number of parameters required, and it will not be obvious at
first sight what values are required. If I am going to keep the queries
in a separate module, I think that I will have to provide some sort of
accompanying documentation with each query explaining what the required
parameters are.

Thinking aloud, I may set up a separate module for the queries, but make
each one a 'function', which specifies what data is required. The caller
calls the function with the data as an argument, and the function uses
it to build the parameter list and returns the SQL along with the
parameters. The function can also contain documentation explaining how
the query works.

As you say, this has the benefit of separating the SQL from the Python
code, so I will definitely pursue this idea.

Thanks

Frank

--
https://eur06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.python.org%2Fmailman%2Flistinfo%2Fpython-list&data=02%7C01%7C%7C7b64f6336b064514601d08d7ffbec673%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637259067140058397&sdata=icodnDnk5HSEtY8WyPBAE6qkc3KalHFf%2F5kEcLgB0Uw%3D&reserved=0