Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!xlned.com!feeder1.xlned.com!news2.euro.net!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.016 X-Spam-Evidence: '*H*': 0.97; '*S*': 0.00; 'charset:iso-8859-7': 0.04; 'column': 0.07; 'says.': 0.09; 'attribute.': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'hits': 0.16; 'subject:run': 0.16; 'top-level': 0.16; 'wrote:': 0.18; 'module': 0.19; 'thu,': 0.19; 'error': 0.23; 'header:In- Reply-To:1': 0.27; 'chris': 0.29; 'message-id:@mail.gmail.com': 0.30; 'code': 0.31; 'says': 0.33; 'received:209.85': 0.35; 'received:209.85.220': 0.35; 'received:google.com': 0.35; 'received:209': 0.37; 'to:addr:python-list': 0.38; 'pm,': 0.38; 'skip:_ 30': 0.39; 'to:addr:python.org': 0.39; 'mar': 0.68; 'webpage': 0.68; '\xcc\xe1\xf1\xf4\xdf\xef\xf5': 0.84; '2013': 0.98 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type:content-transfer-encoding; bh=rlOG+axhDUD6vKpzlgeXV5iXwk6fYvt09MplXsmK+8M=; b=nqaJY/DxyNPk8ez7gIKvUWgzvxODfK0W/RvqeogsB0nO0k+q5+4r00AwqBuhUIVeuC OKbuIM8Pv5rCbqf9jLO+In+qXgmjbV/H/RuLVpfl9A0jAEhoJ8+Y6V05fgB3wKJ2yFRH M2pxWQ6BWUbv2aNYZ9Q5TYpOCInWuK2diLOrXBCpRjDL4gEEE9lFlvWgLc5egd2ysDT2 VGmr/vr9zZ4FV+s7sjz3qvI0XMUTHUWh1HIWym0AVqE6rBwY2IjqHVly714gYIW558bK QMVU7lbV3bNdU1ctdLd7Dahjo5oSNaNK6k6pzV+67rZYXyvxm82a9H23Ke8dONtardnZ p7Cg== MIME-Version: 1.0 X-Received: by 10.52.111.130 with SMTP id ii2mr11017800vdb.111.1364444808666; Wed, 27 Mar 2013 21:26:48 -0700 (PDT) In-Reply-To: <19fcf06e-8923-410c-9acd-abd4534c77bf@googlegroups.com> References: <2ac959c6-d169-452f-b622-83fe25fbd8da@googlegroups.com> <19fcf06e-8923-410c-9acd-abd4534c77bf@googlegroups.com> Date: Thu, 28 Mar 2013 15:26:48 +1100 Subject: Re: Cannot run a single MySQLdb execute.... From: Chris Angelico To: python-list@python.org Content-Type: text/plain; charset=ISO-8859-7 Content-Transfer-Encoding: quoted-printable X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 23 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1364444811 news.xs4all.nl 6891 [2001:888:2000:d::a6]:44863 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:42091 On Thu, Mar 28, 2013 at 3:18 PM, =CD=DF=EA=EF=F2 =C3=EA=F133=EA wrote: > =D4=E7 =D0=DD=EC=F0=F4=E7, 28 =CC=E1=F1=F4=DF=EF=F5 2013 6:08:28 =F0.=EC.= UTC+2, =EF =F7=F1=DE=F3=F4=E7=F2 Chris Angelico =DD=E3=F1=E1=F8=E5: > >> As it says in that document, paramstyle is a top-level module >> attribute. Try printing it out. See what it says. Then match your code > > sql =3D '''SELECT hits FROM counters WHERE url =3D %s''' % page > print( sql ) > cur.execute( sql ) > > Now the error says: > > _mysql_exceptions.OperationalError: (1054, "Unknown column 'index.html' i= n 'where clause'") as you cna see at my webpage http://www.facepalm.de/ Do you understand SQL injection attacks and the concept of parameterized queries? ChrisA