如何在Python3中将PostgreSQL的查询附加到另一个查询中，并防止SQL注入？

import psycopg2

# 连接到PostgreSQL数据库
conn = psycopg2.connect(database="yourdb", user="youruser", password="yourpass", host="yourhost", port="yourport")
cur = conn.cursor()

# 第一个查询，获取一些数据
first_query = "SELECT id, name FROM table1 WHERE condition = %s"
cur.execute(first_query, ('some_value',))
results = cur.fetchall()

# 准备第二个查询，将第一个查询的结果作为参数插入
second_query = """
    INSERT INTO table2 (id, name)
    SELECT %s, %s FROM table1 WHERE id IN %s
"""
# 构造IN子句的占位符
placeholders = ','.join(['%s'] * len(results))
in_clause = f'({placeholders})'

# 执行第二个查询，使用参数化查询防止SQL注入
for row in results:
    cur.execute(second_query.format(in_clause), (*row, tuple(r[0] for r in results)))

# 提交事务
conn.commit()

# 关闭连接
cur.close()
conn.close()