Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #35076 > unrolled thread

Re: Why Doesn't This MySQL Statement Execute?

Back to article view | Back to comp.lang.python

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: Why Doesn't This MySQL Statement Execute? Tom Borkin <borkintom@gmail.com> - 2012-12-18 18:28 -0400

#35076 — Re: Why Doesn't This MySQL Statement Execute?

[Multipart message — attachments visible in raw view] — view raw

No (lol). It returns a date as a string: "2012-12-12" for example.
Tom


On Tue, Dec 18, 2012 at 6:02 PM, Wayne Werner <wayne@waynewerner.com> wrote:

> On Tue, 18 Dec 2012, Tom Borkin wrote:
>
>  Hi;
>> I have this test code:
>>
>>     if i_id == "1186":
>>       sql = 'insert into interactions values(Null, %s, "Call Back",
>> "%s")' % (i_id, date_plus_2)
>>       cursor.execute(sql)
>>       db.commit()
>>       print sql
>> It prints the sql statement, but it doesn't execute. If I copy and paste
>> the sql into the mysql command line it does execute without warnings or
>> errors. What gives?
>>
>
> Does date_plus_2 contain
>
>      "Robert"); DROP TABLE interactions; --
>
> By any chance?
> -W

[toc] | [standalone]

Back to top | Article view | comp.lang.python

csiph-web