CODEWITHSUNDEEP
pythonmysqlpython-3.xpymysql
Sandeep Sandy
Sandeep Sandy

Reputation: 99

Python pymySQL string quotes

I am trying to insert a string 

insert_cmd = "INSERT INTO inv values (\""+str(row[1])+"\",\""+str(row[2])+"\")
(cur.execute(insert_cmd))

Error Message:

pymysql.err.ProgrammingError: (1064, 'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near \'google search appliance"","active","D\' at line 1')

Upvotes: 1

Views: 604

Answers (1)

Matt S
Matt S

Reputation: 15374

Better to use query parameters to avoid quoting and other issues:

cur.execute("INSERT INTO inv values (%s, %s)", (str(row[1]), str(row[2])))

It's also a best practice to name your columns in case your model changes later:

"INSERT INTO inv (col1, col2) VALUES (%s, %s)"

Upvotes: 3

Related Questions