python mysql参数化查询

import mysql.connector

# 连接到数据库
db = mysql.connector.connect(
    host="localhost",
    user="yourusername",
    password="yourpassword",
    database="yourdatabase"
)

cursor = db.cursor()

# 位置参数化查询
sql = "SELECT * FROM users WHERE username = %s AND password = %s"
values = ("admin", "password123")

cursor.execute(sql, values)

results = cursor.fetchall()

for row in results:
    print(row)

cursor.close()
db.close()

import mysql.connector

# 连接到数据库
db = mysql.connector.connect(
    host="localhost",
    user="yourusername",
    password="yourpassword",
    database="yourdatabase"
)

cursor = db.cursor()

# 命名参数化查询
sql = "SELECT * FROM users WHERE username = %(username)s AND password = %(password)s"
values = {"username": "admin", "password": "password123"}

cursor.execute(sql, values)

results = cursor.fetchall()

for row in results:
    print(row)

cursor.close()
db.close()