Python, mySQL with variables

Question

I have the following quesry, where the variables are arrays...

c.execute("INSERT into userData values=(%s,%s,%s,%s,%s,%s)",
            t[i],k[0],k[1],k[2],user[i],total)

This gives a syntax error.

I have also tried this:

a = "INSERT INTO userData VALUES ('"+t[i]+"','"+k[0]+"','"+k[1]+"','"+k[2]+"',
  '"+USER+"','"+total+"')"
c.execute(a)
conn.commit()

This does not update to the database, though there are no errors. Note: c - cursor, conn - connection.

Try this c.excecute("INSERT into userData values(%s,%s,%s,%s,%s,%s)",( t[i],k[0],k[1],k[2],user[i],total)) it is beacause the second parameter to execute model is tuple of arguments and there is no need for = — The6thSense
– The6thSense, Commented Feb 26, 2016 at 9:57

Eugene Yarmash · Accepted Answer · 2016-02-26 10:03:10Z

1

cursor.execute() expects the query parameters as a tuple. Try this:

cursor.execute("INSERT INTO userData VALUES (%s, %s, %s, %s, %s, %s)",
               (t[i], k[0], k[1], k[2], user[i], total))

Don't use + or the like for constructing SQL queries, as this can lead to SQL-injection vulnerabilities in your code.

answered Feb 26, 2016 at 10:03

Eugene Yarmash

152k44 gold badges346 silver badges391 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

xpy · Accepted Answer · 2016-02-26 10:00:12Z

0

Maybe try with the following syntax:

INSERT INTO table(col1,col2,...)VALUES(val1,val2,...)

xpy

5,6713 gold badges32 silver badges52 bronze badges

answered Feb 26, 2016 at 9:58

mr smok

113 bronze badges