python防止mysql注入

import mysql.connector

# 连接数据库
db = mysql.connector.connect(
    host="localhost",
    user="yourusername",
    password="yourpassword",
    database="yourdatabase"
)

# 创建游标
cursor = db.cursor()

# 使用参数化查询
query = "SELECT * FROM users WHERE username = %s AND password = %s"
values = ("admin", "password123")
cursor.execute(query, values)

# 获取结果
results = cursor.fetchall()

# 关闭游标和数据库连接
cursor.close()
db.close()

from django.db import models

class User(models.Model):
    username = models.CharField(max_length=100)
    password = models.CharField(max_length=100)

# 查询示例
users = User.objects.filter(username="admin", password="password123")

from sqlalchemy import create_engine, Column, Integer, String
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.orm import sessionmaker

Base = declarative_base()

class User(Base):
    __tablename__ = 'users'
    id = Column(Integer, primary_key=True)
    username = Column(String)
    password = Column(String)

engine = create_engine('sqlite:///example.db')
Session = sessionmaker(bind=engine)
session = Session()

# 查询示例
users = session.query(User).filter_by(username="admin", password="password123").all()