防止 SQL 注入
防止 SQL 注入详细操作教程
以下实例为学习防止 SQL 注入，具体代码如下：
# Filename : example.py
# Author by : www.lidihuo.com
import mysql.connector
mydb = mysql.connector.connect(
host="localhost",
user="myusername",
passwd="mypassword",
database="mydatabase"
)
mycursor = mydb.cursor()
sql = "UPDATE customers SET address = %s WHERE address = %s"
val = ("Valley 345", "Canyon 123")
mycursor.execute(sql, val)
mydb.commit()
print(mycursor.rowcount, "record(s) affected")
执行以上代码输出结果为：
# Filename : example.py
# Author by : www.lidihuo.com
1 record(s) affected
