mysql防注入插件

import mysql.connector
from mysql.connector import errorcode

try:
    cnx = mysql.connector.connect(user='user', password='password', host='host', database='database')
    cursor = cnx.cursor()

    # 使用参数化查询防止SQL注入
    query = "SELECT * FROM users WHERE username = %s AND password = %s"
    cursor.execute(query, ('admin', 'password123'))

    for row in cursor:
        print(row)

except mysql.connector.Error as err:
    if err.errno == errorcode.ER_ACCESS_DENIED_ERROR:
        print("Something is wrong with your user name or password")
    elif err.errno == errorcode.ER_BAD_DB_ERROR:
        print("Database does not exist")
    else:
        print(err)
finally:
    if cnx:
        cnx.close()