Escaping Characters in Python Variables

Question

I have a list of names that I scrape form a site using python and add to a database. All works well except for the occasional name that has a ' in it. I understand have to use escape characters in a specific string when I know where the character is but is there a way to escape any character that might be in a string without knowing if they are are there or not?

For example, in the following code I need to escape special characters in the name variable:

cursor.execute("""INSERT INTO players (name, position, team, status) values ('%s', '%s', %s, %s)""" % (name, position, team, status))

I am unclear why you believe this is relevant, please explain. First and for most I see no mention of escaping for python in here. — mgrenier
– mgrenier, Commented Oct 22, 2016 at 23:56

Francisco · Accepted Answer · 2016-10-23 00:04:18Z

1

The proper way is to pass the arguments in a tuple to cursor.execute:

cursor.execute("""INSERT INTO players (name, position, team, status) values (%s, %s, %s, %s)""", (name, position, team, status))

And let the cursor do the escaping.

answered Oct 23, 2016 at 0:04

Francisco

11.6k6 gold badges37 silver badges47 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Escaping Characters in Python Variables

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related