Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!aioe.org!feeder.news-service.com!newsfeed.xs4all.nl!newsfeed6.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.000 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; '(at': 0.03; 'parameter': 0.05; '+0100,': 0.07; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:80.91.229.12': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'received:lo.gmane.org': 0.09; 'bieber': 0.16; 'declaimed': 0.16; 'email addr:ix.netcom.com': 0.16; 'email name:wlfraed': 0.16; 'from:addr:ix.netcom.com': 0.16; 'from:addr:wlfraed': 0.16; 'from:name:dennis lee bieber': 0.16; 'received:66.245': 0.16; 'received:dsl.mindspring.com': 0.16; 'received:mindspring.com': 0.16; 'received:wlfraed': 0.16; 'url:netcom': 0.16; 'url:wlfraed': 0.16; 'wulfraed': 0.16; '(or': 0.22; 'lee': 0.22; 'mon,': 0.22; 'values': 0.23; 'properly': 0.25; 'url:home': 0.25; 'least': 0.30; "won't": 0.30; 'wraps': 0.31; "skip:' 10": 0.32; 'to:addr:python- list': 0.32; '...': 0.32; 'header:X-Complaints-To:1': 0.34; 'put': 0.35; 'quotes': 0.35; 'subject:use': 0.35; 'charset:us-ascii': 0.36; 'data': 0.37; 'either': 0.37; 'apr': 0.38; 'received:org': 0.38; 'tim': 0.39; 'end': 0.39; 'to:addr:python.org': 0.39; 'where': 0.39; 'header:Mime-Version:1': 0.39; 'header:Received:5': 0.40; '2011': 0.62; 'dennis': 0.68; 'golden': 0.68 X-Injected-Via-Gmane: http://gmane.org/ To: python-list@python.org From: Dennis Lee Bieber Subject: Re: strange use of %s Date: Mon, 18 Apr 2011 22:22:14 -0700 Organization: > Bestiaria Support Staff < References: <4dabf65a$0$18250$4fafbaef@reader2.news.tin.it> <4DABF9F8.2020609@timgolden.me.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Gmane-NNTP-Posting-Host: user-11fb5ta.dsl.mindspring.com X-Newsreader: Forte Agent 3.3/32.846 X-No-Archive: YES X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 22 NNTP-Posting-Host: 82.94.164.166 X-Trace: 1303190543 news.xs4all.nl 81473 [::ffff:82.94.164.166]:36191 X-Complaints-To: abuse@xs4all.nl Xref: x330-a1.tempe.blueboxinc.net comp.lang.python:3537 On Mon, 18 Apr 2011 09:44:40 +0100, Tim Golden declaimed the following in gmane.comp.python.general: > sql = "SELECT ... WHERE name LIKE '%' + ? + '%'" > q = db.cursor () > q.execute (sql, [response]) > That won't work properly either (at least not in MySQLdb -- which quotes the values put into the placeholder; you'd end up with '%''value''%' ) sql = "select ... where name like ?" (or for MySQLdb: ...like %s ) ... q.execute(sql, [ "%%s%" % response]) which wraps the % around the parameter data itself before it gets into the DB-API adapter. -- Wulfraed Dennis Lee Bieber AF6VN wlfraed@ix.netcom.com HTTP://wlfraed.home.netcom.com/