Python MySQL Where

Amfani da ɗaukar hanyar domin ɗaukar hanyar:

Zaɗi amfani da ɗaukar hanyar "WHERE" domin ɗaukar hanyar ɗaukar hanyar:

实例

Zaɗi ɗaukar hanyar "Park Lane 38" kuma zaɗin ɗaukar hanyar, wuri:

import mysql.connector
mydb = mysql.connector.connect(
  host="localhost",
  user="yourusername",
  passwd="yourpassword",
  database="mydatabase"
)
mycursor = mydb.cursor()
sql = "SELECT * FROM customers WHERE address ='Park Lane 38'"
mycursor.execute(sql)
myresult = mycursor.fetchall()
for x in myresult:
  print(x)

Gudanar Shafin

Takamaimanin:

Zaɗi kuma zaɗin ɗaukar hanyar da baya, kuma ɗaukar hanyar da kuma yana kwanan shi, kuma ɗaukar hanyar da kuma yana kwanan shi.

Kosai amfani da: Wannan shi ne takamaimanin:

实例

Zaɗi hanyar ɗaya ce zaɗin ɗaukar hanyar "way"

import mysql.connector
mydb = mysql.connector.connect(
  host="localhost",
  user="yourusername",
  passwd="yourpassword",
  database="mydatabase"
)
mycursor = mydb.cursor()
sql = "SELECT * FROM customers WHERE address LIKE '%way%'"
mycursor.execute(sql)
myresult = mycursor.fetchall()
for x in myresult:
  print(x)

Gudanar Shafin

防止 SQL 注入

当用户提供查询值时,您应该转义这些值。

此举是为了防止 SQL 注入,这是一种常见的网络黑客技术,可以破坏或滥用您的数据库。

mysql.connector 模块拥有转义查询值的方法:

实例

使用占位符 %s 方法来转义查询值:

import mysql.connector
mydb = mysql.connector.connect(
  host="localhost",
  user="yourusername",
  passwd="yourpassword",
  database="mydatabase"
)
mycursor = mydb.cursor()
sql = "SELECT * FROM customers WHERE address =" %s"
adr = ("Yellow Garden 2", )
mycursor.execute(sql, adr)
myresult = mycursor.fetchall()
for x in myresult:
  print(x)

Gudanar Shafin