Add ' ' to SQL query parameter in Python

Question

How can I convert the account value into a string that my SQL query accepts.

import pandas as pd
import os
from xlwings import Workbook, Range
from sqlalchemy import create_engine

account = Range('G2').options(numbers=int).value #account number #value is 3001001000

sql = 'SELECT top 30 oraclenum,pcat,ConLenses, sum(dollars) as dollars FROM ' \
          'ConData WHERE oraclenum = {} group by oraclenum,pcat, ConLenses'.format(account)

How can I include the value between ' '. Kinda like WHERE oraclenum = '3001001000' in my SQL query. It throws an error if its not formatted as a string.

Consider parameterized queries.

Lunaweaver
– Lunaweaver

2016-11-11 20:55:06 +00:00
Commented Nov 11, 2016 at 20:55 — Lunaweaver
– Lunaweaver, Commented Nov 11, 2016 at 20:55

Jean-François Fabre · Accepted Answer · 2016-11-11 20:27:31Z

2

You could put escaped quotes around your format expression (\'{}\'), though the best way is to swap quotes for double quotes and put simple quotes around your format string

sql = "SELECT top 30 oraclenum,pcat,ConLenses, sum(dollars) as dollars FROM " \
          "ConData WHERE oraclenum = '{}' group by oraclenum,pcat, ConLenses".format(account)

answered Nov 11, 2016 at 20:27

Jean-François Fabre♦

141k24 gold badges179 silver badges246 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Lunaweaver Over a year ago

You could also use """ (triple quotes) for multi-line strings. See stackoverflow.com/questions/10660435/…

Jean-François Fabre Over a year ago

you're right, but in that case, it's just 2 strings on a single line, concatenated and using backslash to avoid creating a too long line.

Collectives™ on Stack Overflow

Add ' ' to SQL query parameter in Python

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related