SQL 使用变量注入查询 - SQL Alchemy - Python

Question

我有一个关于使用 sqlalchemy/python(3.8).

向 sql 查询中注入变量的问题

到目前为止我研究的是添加 %s 以及 email_address=?然后添加它 (email_address) 但没有成功

我想做的是捕获用户输入和运行 select 动态查询。

print(" What is the email address??")
email_address = input()
conn = create_engine("mssql+pyodbc://test_table:username@127.0.0.1:3306/test_db?driver=SQL Server?Trusted_Connection=yes'", echo = False)
sql = pd.read_sql('Select id,email_address from test_table where email_address = email_address', conn)
print(sql)

Answer 1

尝试：

print(" What is the email address??")
email_address = input()
conn = create_engine("mssql+pyodbc://test_table:username@127.0.0.1:3306/test_db?driver=SQL Server?Trusted_Connection=yes'", echo = False)
sql = pd.read_sql('Select id,email_address from test_table where email_addres=?', conn, params=(email_addres,))
print(sql)

SQL 使用变量注入查询 - SQL Alchemy - Python

SQL Query with variable injection - SQL Alchemy - Python

python

sql

variables

sqlalchemy

user-input