将字符串转换为sql查询

import re
import mysql.connector

def convert_string_to_sql(query_string):
    # 解析字符串，提取关键信息
    table_name = re.search(r'FROM (\w+)', query_string).group(1)
    condition = re.search(r'WHERE (.+)', query_string).group(1)

    # 构建SQL查询语句
    sql_query = f"SELECT * FROM {table_name} WHERE {condition}"

    # 连接数据库
    conn = mysql.connector.connect(
        host="localhost",
        user="username",
        password="password",
        database="database_name"
    )
    cursor = conn.cursor()

    try:
        # 执行参数化查询
        cursor.execute(sql_query)
        result = cursor.fetchall()
        return result
    except Exception as e:
        # 处理错误
        print(f"Error executing SQL query: {e}")
    finally:
        # 关闭数据库连接
        cursor.close()
        conn.close()

# 示例查询字符串
query_string = "SELECT * FROM customers WHERE age > 18"

# 转换字符串为SQL查询并执行
result = convert_string_to_sql(query_string)
print(result)