0

Error message

My code for import.py Whenever I run my code, I get a strange error message because of my code. It is because of my SQL code, but I followed all of the instructions, and even tried some other SQL code, which worked successfully. Please help me understand what it means.

Improve this question
1
  • Did you forget to use a parametrized query to prevent sql injection, as discussed in the lecture starting around 1:43:00? You'll find examples in the source code
    – DinoCoderSaurus
    May 9, 2020 at 22:59

1 Answer 1

Reset to default
0

I have figured it out, thank you DinoCoderSauraus. It was because to use a variable in db.execute, I needed to use the f, for format. I needed to write, 

db.execute(f"INSERT INTO students (first, middle, last, house, birth) VALUES ('{name[0]}', '{middle}', '{name[len(name)-1]}', '{x[1]}', {x[2]});")

Thanks!

Improve this answer
1
  • That solves the problem but it's not the optimal solution. Your app is wide open to sql injection. You should use parameterized queries. Make it a habit.
    – DinoCoderSaurus
    May 10, 2020 at 3:25

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .