Postgres insert syntax error

Question

My SQL query looks like this:

product = 'Huggies Little Movers Diaper Pants for Boys Size 5 (60 Count)'
retailer = 'Target'
query = """SELECT * FROM product_info WHERE product_name = %s AND retailer = %s""" % (product, retailer)

conn = psycopg2.connect("dbname='test1' user='postgres' host='localhost' password='123'")
cur = conn.cursor(cursor_factory = psycopg2.extras.RealDictCursor)
cur.execute(query)

When i execute that i get a error saying:

psycopg2.ProgrammingError: syntax error at or near "Basic"

I am not sure why my syntax is wrong

Joachim Isaksson · Accepted Answer · 2016-03-10 15:17:34Z

2

Your statement;

query = """SELECT * FROM product_info WHERE product_name = %s AND retailer = %s""" % (product, retailer)

...builds a complete string from the query and parameters without any quoting around your strings, which makes the entire string invalid SQL which fails at execute;

SELECT * FROM product_info 
WHERE product_name = Huggies Little Movers Diaper Pants for Boys Size 5 (60 Count) 
  AND retailer = Target

What you're probably trying to do is parameterizing your query which is instead done in execute by passing the parameters in a tuple;

query = """SELECT * FROM product_info WHERE product_name = %s AND retailer = %s"""
...
cur.execute(query, (product, retailer))

answered Mar 10, 2016 at 15:17

Joachim Isaksson

182k28 gold badges297 silver badges307 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Postgres insert syntax error

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related