如何验证用于查询PostgreSQL数据库的字符串？

import psycopg2

# 连接到PostgreSQL数据库
conn = psycopg2.connect(database="your_database", user="your_user", password="your_password", host="your_host", port="your_port")

# 创建游标对象
cur = conn.cursor()

# 准备查询语句
query = "SELECT * FROM your_table WHERE column = %s"

# 准备参数
param = "your_string"

# 执行查询
cur.execute(query, (param,))

# 获取查询结果
result = cur.fetchall()

# 关闭游标和数据库连接
cur.close()
conn.close()

import psycopg2

# 连接到PostgreSQL数据库
conn = psycopg2.connect(database="your_database", user="your_user", password="your_password", host="your_host", port="your_port")

# 创建游标对象
cur = conn.cursor()

# 准备预处理语句
cur.prepare("SELECT * FROM your_table WHERE column = %s")

# 准备参数
param = "your_string"

# 执行查询
cur.execute("EXECUTE your_query (%s)", (param,))

# 获取查询结果
result = cur.fetchall()

# 关闭游标和数据库连接
cur.close()
conn.close()