sql查询中的python列表作为参数 [英] python list in sql query as parameter

问题描述

我有一个 python 列表，比如说 l

I have a python list, say l

l = [1,5,8]

我想写一个sql查询来获取列表中所有元素的数据，比如

I want to write a sql query to get the data for all the elements of the list, say

select name from students where id = |IN THE LIST l|

我该如何实现?

推荐答案

到目前为止，答案是将值模板化为一个普通的 SQL 字符串.这对整数来说绝对没问题，但如果我们想对字符串这样做，我们就会遇到转义问题.

Answers so far have been templating the values into a plain SQL string. That's absolutely fine for integers, but if we wanted to do it for strings we get the escaping issue.

这是一个使用参数化查询的变体，适用于两者:

Here's a variant using a parameterised query that would work for both:

placeholder= '?' # For SQLite. See DBAPI paramstyle.
placeholders= ', '.join(placeholder for unused in l)
query= 'SELECT name FROM students WHERE id IN (%s)' % placeholders
cursor.execute(query, l)

这篇关于sql查询中的python列表作为参数的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！