将数据插入mysql，避免使用python注入sql

o3imoua4 于 2021-06-23 发布在 Mysql

关注(0)|答案(1)|浏览(284)

这个问题在这里已经有答案了：

pymysql插入不工作（3个答案）
两年前关门了。
我哪里做错了？查询成功运行，但数据库表中没有数据存储
我的代码块是

import pymysql                                                                                         
db = pymysql.connect(host='', user='', passwd='',db='')                     
cursor = db.cursor()                                                                                   
cursor.executemany("""INSERT INTO Mention ( keyword, required, optional, excluded)                     
      VALUES (%s,%s,%s,%s)""",                                                                         
     [                                                                                                 
     ("Spam","fg","gtg","uu") ,                                                                        
     ("dd","fg","gtg","uu") ,                                                                          
     ("dd","fg","gtg","uu")                                                                            
     ])                                                                                                
print(cursor.fetchmany())

mysql python sql-injection

来源：https://stackoverflow.com/questions/51779025/inserting-data-to-mysql-avoiding-sql-injection-using-python

1条答案

按热度按时间

sdnqo3pr1#

建议将参数传递到execute函数中，因为它们将自动转义。
试试这个：

insert_stmt = (
  "INSERT INTO Mention ( keyword, required, optional, excluded)                     
      VALUES (%s,%s,%s,%s)"
)
data = [                                                                                                 
     ("Spam","fg","gtg","uu") ,                                                                        
     ("dd","fg","gtg","uu") ,                                                                          
     ("dd","fg","gtg","uu")                                                                            
     ]
cursor.execute(insert_stmt, data)

赞(0）回复(0）举报 2021-06-23

我来回答

将数据插入mysql，避免使用python注入sql

1条答案

相关问题

热门标签

最新问答